General
- Target 2026-08-09_04b5226b308851e7f191b4648acc4e46_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 6.3MB
- Sample260809-vt6g2sseqa
- SHA256 440314365030ed18ae2b187004c38947be3ead9ae6cb411cf38393b0926932b1
- MD5 04b5226b308851e7f191b4648acc4e46
- SHA1 2ca694af9c6be3317ece693e262f7660ac781b96
- SHA512 fcc05eb834e0d0d8a98d99bdd3c49d71a54ff48b55cce44f0b3d11e218964da95a0aa3ffb8bb0e83ae6fd2d4c48e041df3e20d9427bac1a1661bbe01361e1848
- SSDEEP 98304:vOkmXLLaK+XtYFJJU3o+8F2fMG4bNRtZ43QFMz/VW:Wh8t+9+a2f+bvteAe
- TLSH T184668D13F3A500A8E05ED9B4CF3952229B757C9B47B192EF269436E11E72DD43B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_04b5226b308851e7f191b4648acc4e46_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_04b5226b308851e7f191b4648acc4e46_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 6.3MB
- SHA256 440314365030ed18ae2b187004c38947be3ead9ae6cb411cf38393b0926932b1
- MD5 04b5226b308851e7f191b4648acc4e46
- SHA1 2ca694af9c6be3317ece693e262f7660ac781b96
- SHA512 fcc05eb834e0d0d8a98d99bdd3c49d71a54ff48b55cce44f0b3d11e218964da95a0aa3ffb8bb0e83ae6fd2d4c48e041df3e20d9427bac1a1661bbe01361e1848
- SSDEEP 98304:vOkmXLLaK+XtYFJJU3o+8F2fMG4bNRtZ43QFMz/VW:Wh8t+9+a2f+bvteAe
- TLSH T184668D13F3A500A8E05ED9B4CF3952229B757C9B47B192EF269436E11E72DD43B38B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1