General

  • Target
    2026-08-07_11ca5db6691722d902b8dd083db01ff7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
  • Size 812KB
  • Sample260807-qe8lmsywdv
  • SHA256 73150001e2894755e1771901ce8da2aec0ace1c09176c8871c4e88747d805345
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-07_11ca5db6691722d902b8dd083db01ff7_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
    • Size 812KB
    • SHA256 73150001e2894755e1771901ce8da2aec0ace1c09176c8871c4e88747d805345
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks