General
- Target 2026-08-08_04f0ea88341e35fe44b1bf167ee79a95_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260808-et3s6azfkh
- SHA256 58806702a7788905f91d30669455ed750ff6e8117b8dbe2d9077bc611602b40b
- MD5 04f0ea88341e35fe44b1bf167ee79a95
- SHA1 d25ca90ac249ed8b09054c404f86d71c424bb944
- SHA512 58e3b8dfc0d5cd6a33a5c92411eeaccb9ae2186a64f1fa05729cd8280ad08d9c8a579bdf079395b14422dc94b13242a1f66310646610dbcd65a362b8d0d3e52d
- SSDEEP 49152:aHs5/4aWEzVHEh2bK2pTETMcE7Jckdwi3N7+WTW3:aHm02RlPdwi3Q
- TLSH T1E885BF07B69600FCD06DC1B8CB169532EAB1B8850F31BADF1790A3692E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_04f0ea88341e35fe44b1bf167ee79a95_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_04f0ea88341e35fe44b1bf167ee79a95_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 58806702a7788905f91d30669455ed750ff6e8117b8dbe2d9077bc611602b40b
- MD5 04f0ea88341e35fe44b1bf167ee79a95
- SHA1 d25ca90ac249ed8b09054c404f86d71c424bb944
- SHA512 58e3b8dfc0d5cd6a33a5c92411eeaccb9ae2186a64f1fa05729cd8280ad08d9c8a579bdf079395b14422dc94b13242a1f66310646610dbcd65a362b8d0d3e52d
- SSDEEP 49152:aHs5/4aWEzVHEh2bK2pTETMcE7Jckdwi3N7+WTW3:aHm02RlPdwi3Q
- TLSH T1E885BF07B69600FCD06DC1B8CB169532EAB1B8850F31BADF1790A3692E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1