General
- Target 2026-08-09_e255b479b6184b8a8bae65eacc26ca2e_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.9MB
- Sample260809-lq1mysythw
- SHA256 ca2d9bb1c3c5558f19bbfb770a854fd160fe579cb56eda3b87a66da9727f0d98
- MD5 e255b479b6184b8a8bae65eacc26ca2e
- SHA1 6cf6766597a20434f97765c6daeca6b2ac82cb2f
- SHA512 37686ed5d441936bb889e088077b16d8b9eda0f197424b56263945e03f4ec7d959f2cc03e37fea8f10924f8c268f249191475eaef95bf3da26cbacf86e4f0b85
- SSDEEP 24576:vBYGb8ant3A6nzSpm8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:WI8KA6tgDUYmvFur31yAipQCtXxc0H
- TLSH T11A95E015A7E900F9E1B7D638C9A75602E77B7C450270DB4F03A8927B1F736909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e255b479b6184b8a8bae65eacc26ca2e_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_e255b479b6184b8a8bae65eacc26ca2e_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e255b479b6184b8a8bae65eacc26ca2e_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.9MB
- SHA256 ca2d9bb1c3c5558f19bbfb770a854fd160fe579cb56eda3b87a66da9727f0d98
- MD5 e255b479b6184b8a8bae65eacc26ca2e
- SHA1 6cf6766597a20434f97765c6daeca6b2ac82cb2f
- SHA512 37686ed5d441936bb889e088077b16d8b9eda0f197424b56263945e03f4ec7d959f2cc03e37fea8f10924f8c268f249191475eaef95bf3da26cbacf86e4f0b85
- SSDEEP 24576:vBYGb8ant3A6nzSpm8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:WI8KA6tgDUYmvFur31yAipQCtXxc0H
- TLSH T11A95E015A7E900F9E1B7D638C9A75602E77B7C450270DB4F03A8927B1F736909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1