General
- Target 2026-08-09_dd066a523a8b57719b23b2b6e9422bea_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample260809-lrq5xavepc
- SHA256 bf9419593762f6c0a09cc74cf941b40f5ead159cb00fef131077a1e05f67fc68
- MD5 dd066a523a8b57719b23b2b6e9422bea
- SHA1 254851c882969d9d81a1e7cb732a5be1edeb350d
- SHA512 92d6890e3cfec2e61034c25a8f7dde2d509e94005cbdb8a1e411c873c643e0aff0c09b1f2c42e750f0dd492e53b0eb7c0ffbc588876e25357ac618078bdb9db6
- SSDEEP 24576:3BYGb8azt3A6nzSpFyvOcXW/jEEL9HmNuQJDzkY:OI8WA6IyfYEEpGnJv
- TLSH T13B85E04963E900B8E1B7E678C9A74902E77B7C460670DB4F03E885672F77660DE39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_dd066a523a8b57719b23b2b6e9422bea_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_dd066a523a8b57719b23b2b6e9422bea_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 bf9419593762f6c0a09cc74cf941b40f5ead159cb00fef131077a1e05f67fc68
- MD5 dd066a523a8b57719b23b2b6e9422bea
- SHA1 254851c882969d9d81a1e7cb732a5be1edeb350d
- SHA512 92d6890e3cfec2e61034c25a8f7dde2d509e94005cbdb8a1e411c873c643e0aff0c09b1f2c42e750f0dd492e53b0eb7c0ffbc588876e25357ac618078bdb9db6
- SSDEEP 24576:3BYGb8azt3A6nzSpFyvOcXW/jEEL9HmNuQJDzkY:OI8WA6IyfYEEpGnJv
- TLSH T13B85E04963E900B8E1B7E678C9A74902E77B7C460670DB4F03E885672F77660DE39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1