General
- Target 2026-08-08_3af09e3911f38af0e22f03bab68fa100_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260808-ecf8tszbrd
- SHA256 fc09b7c84e97f5be64010f0e9bf0e2458dc8abffb62e6689ea65dca2f316a376
- MD5 3af09e3911f38af0e22f03bab68fa100
- SHA1 92a834149a6760779ea6666e5f4a7fc1c7611251
- SHA512 06f9a621f7d5364d310158f76ca949a89e1f56114dbb0b6936bc1b0acc74b5c949acf1f98da9e258ba66e0d872d906f0473075993e7a8f1beba3bf12031b44d0
- SSDEEP 49152:cHs5/NaWEzVHEh2bK2pTETMc+SmbQyFkBWspBhtsL:cHmx2RxzkBG
- TLSH T18985BE07B69500F8D06DC1B8CB169532EAB1B8850F71BADF1390A3292E7BAE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_3af09e3911f38af0e22f03bab68fa100_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_3af09e3911f38af0e22f03bab68fa100_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 fc09b7c84e97f5be64010f0e9bf0e2458dc8abffb62e6689ea65dca2f316a376
- MD5 3af09e3911f38af0e22f03bab68fa100
- SHA1 92a834149a6760779ea6666e5f4a7fc1c7611251
- SHA512 06f9a621f7d5364d310158f76ca949a89e1f56114dbb0b6936bc1b0acc74b5c949acf1f98da9e258ba66e0d872d906f0473075993e7a8f1beba3bf12031b44d0
- SSDEEP 49152:cHs5/NaWEzVHEh2bK2pTETMc+SmbQyFkBWspBhtsL:cHmx2RxzkBG
- TLSH T18985BE07B69500F8D06DC1B8CB169532EAB1B8850F71BADF1390A3292E7BAE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1