General
- Target 2026-08-12_1e836cd4d98819b15c624f04c0b017b8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260812-r7n85sam7v
- SHA256 bc0b0c59e36d0e4b571765da815a024c7da5102d3cf8f3dc4214f2c88afc4573
- MD5 1e836cd4d98819b15c624f04c0b017b8
- SHA1 8c41649729a155617851ad43742226a2b7055652
- SHA512 6b04e56da80666ecef60986df4b90d62ff10a3e2da1c5c53546b7d2fd1f9413f15ab4c65fc77dd5b4c2218d850c1dadef889f9b1863b9fac8cfd31749e843ec8
- SSDEEP 24576:A9z4S0VpLP7DhspWcY/0eaB9gQwt2vVOKBrbPdV:A9MJpr7FspHYY42tOoj
- TLSH T15B65D01BBAA900FDD069C179CB475132EA71B8461B70BAEF0391C2693E776E05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_1e836cd4d98819b15c624f04c0b017b8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_1e836cd4d98819b15c624f04c0b017b8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 bc0b0c59e36d0e4b571765da815a024c7da5102d3cf8f3dc4214f2c88afc4573
- MD5 1e836cd4d98819b15c624f04c0b017b8
- SHA1 8c41649729a155617851ad43742226a2b7055652
- SHA512 6b04e56da80666ecef60986df4b90d62ff10a3e2da1c5c53546b7d2fd1f9413f15ab4c65fc77dd5b4c2218d850c1dadef889f9b1863b9fac8cfd31749e843ec8
- SSDEEP 24576:A9z4S0VpLP7DhspWcY/0eaB9gQwt2vVOKBrbPdV:A9MJpr7FspHYY42tOoj
- TLSH T15B65D01BBAA900FDD069C179CB475132EA71B8461B70BAEF0391C2693E776E05F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1