General
- Target 2026-08-13_0e0d48d3ac8731a2a2e19c3ad0e9882f_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.6MB
- Sample260813-q3c5ms1eqf
- SHA256 45cb4c6e04a0978aa8c2ea082abe3822cd7d88782f984fc65919fcd3470c6a19
- MD5 0e0d48d3ac8731a2a2e19c3ad0e9882f
- SHA1 829b997f9d1d53394aa3aee98d65b5956700a012
- SHA512 33f5e69dd425435fce2435a4afad5e0bbcdd4de0e6c6c7f4eda26222d35021eb20f28f5f3da2f2dc853ccf1837ca6bde183dfa609e5f809460bad338273b7b62
- SSDEEP 24576:aBYGb8aMt3A6nzSpENyBo4kx929bL3Hnx:JI8BA6gB+kn3Hnx
- TLSH T17485D01567E800B9F1B7E678C9A74902E77B7C050670DB8F03E885772F676509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_0e0d48d3ac8731a2a2e19c3ad0e9882f_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_0e0d48d3ac8731a2a2e19c3ad0e9882f_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.6MB
- SHA256 45cb4c6e04a0978aa8c2ea082abe3822cd7d88782f984fc65919fcd3470c6a19
- MD5 0e0d48d3ac8731a2a2e19c3ad0e9882f
- SHA1 829b997f9d1d53394aa3aee98d65b5956700a012
- SHA512 33f5e69dd425435fce2435a4afad5e0bbcdd4de0e6c6c7f4eda26222d35021eb20f28f5f3da2f2dc853ccf1837ca6bde183dfa609e5f809460bad338273b7b62
- SSDEEP 24576:aBYGb8aMt3A6nzSpENyBo4kx929bL3Hnx:JI8BA6gB+kn3Hnx
- TLSH T17485D01567E800B9F1B7E678C9A74902E77B7C050670DB8F03E885772F676509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory