General
- Target 2026-08-08_b94fec493da0d9e2cc4aa2e7e532ce0f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260808-rk9assdh36
- SHA256 20765d035f535285fba8df3f6646f4038c8734e40679f850c52eae80ceadb438
- MD5 b94fec493da0d9e2cc4aa2e7e532ce0f
- SHA1 82642eda13772f0b18132b320e42e94d8b097fb8
- SHA512 bc8071b55593eff7f203d13d46695f5df2b5fd7620fe5df0113f5736114948238b8a55817050590186d3780c53dc33bf8bc7223eef41604bc9e06218056da304
- SSDEEP 24576:KeB4t0VpLP7DhspWcY/0eafKINWE4aH7YBr69CyjQJUrBbbZtB:KeSwpr7FspHYWNzjSr6xbt
- TLSH T12765D01BBAA910FDD06DC139C7465232E671B8460B70BAEF0391D2693E776E45F3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b94fec493da0d9e2cc4aa2e7e532ce0f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b94fec493da0d9e2cc4aa2e7e532ce0f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_b94fec493da0d9e2cc4aa2e7e532ce0f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 20765d035f535285fba8df3f6646f4038c8734e40679f850c52eae80ceadb438
- MD5 b94fec493da0d9e2cc4aa2e7e532ce0f
- SHA1 82642eda13772f0b18132b320e42e94d8b097fb8
- SHA512 bc8071b55593eff7f203d13d46695f5df2b5fd7620fe5df0113f5736114948238b8a55817050590186d3780c53dc33bf8bc7223eef41604bc9e06218056da304
- SSDEEP 24576:KeB4t0VpLP7DhspWcY/0eafKINWE4aH7YBr69CyjQJUrBbbZtB:KeSwpr7FspHYWNzjSr6xbt
- TLSH T12765D01BBAA910FDD06DC139C7465232E671B8460B70BAEF0391D2693E776E45F3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1