General
- Target 2026-08-14_8e922db869510b13507b468b25db7280_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 3.0MB
- Sample260814-ed42aafa58
- SHA256 f06210e9067fade582d968e83b44e5cbc0db5bdccc71d14a4b63cc6f9aa9f0a1
- MD5 8e922db869510b13507b468b25db7280
- SHA1 8f47ca04c18d4a3889d3938709c73163990c737a
- SHA512 de493600073f5f1338b90f8acba863f836042a0db457993d373961ecff17eec0f2e2fed99a5dc48a122487d632d6c69e26e186760122cb9f240a3443834eb474
- SSDEEP 49152:Hgh8jK3xEPK3Hkcm4L8A5iltfJJnB58MlSKl2HJpnsxJIUBt/jbwMu:HMYTKXkcmjfJiI/r/u
- TLSH T154E58E6D7AED00C6C175E1B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_8e922db869510b13507b468b25db7280_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_8e922db869510b13507b468b25db7280_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 3.0MB
- SHA256 f06210e9067fade582d968e83b44e5cbc0db5bdccc71d14a4b63cc6f9aa9f0a1
- MD5 8e922db869510b13507b468b25db7280
- SHA1 8f47ca04c18d4a3889d3938709c73163990c737a
- SHA512 de493600073f5f1338b90f8acba863f836042a0db457993d373961ecff17eec0f2e2fed99a5dc48a122487d632d6c69e26e186760122cb9f240a3443834eb474
- SSDEEP 49152:Hgh8jK3xEPK3Hkcm4L8A5iltfJJnB58MlSKl2HJpnsxJIUBt/jbwMu:HMYTKXkcmjfJiI/r/u
- TLSH T154E58E6D7AED00C6C175E1B8CC022791E2B2B825473145CB76A46E2D6F3FEE49E7D620
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1