General
- Target 2026-08-14_bad63df13e2d74d1469684fc8f401c2a_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- Sample260814-lp8bea1tat
- SHA256 04672c78b82e3c9656261cfdad3b64e5dddcd815c09e2229d4e7d87b6a84ea77
- MD5 bad63df13e2d74d1469684fc8f401c2a
- SHA1 27999ea92f299cbb0aeae905711e09e9e32203f2
- SHA512 579a406a976e1c1f532a7796d7228674767b58286b64524cfd60107260579f577b9279056f2fbcaa92e4622799dc47d7da5d60bb17699907d61288a93b3c88ba
- SSDEEP 12288:eg/33npArWjfX7XRK7HcfNsTTcMPbDE0YbdHtFUu8spNOtWoy/ZbgD:egf6afTfN2TxzYDFU8/US/ZU
- TLSH T19F05F10A77E94CF9DA27C17DC8528202E77278450735DBDF57A0027B6F236A06E3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_bad63df13e2d74d1469684fc8f401c2a_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_bad63df13e2d74d1469684fc8f401c2a_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- SHA256 04672c78b82e3c9656261cfdad3b64e5dddcd815c09e2229d4e7d87b6a84ea77
- MD5 bad63df13e2d74d1469684fc8f401c2a
- SHA1 27999ea92f299cbb0aeae905711e09e9e32203f2
- SHA512 579a406a976e1c1f532a7796d7228674767b58286b64524cfd60107260579f577b9279056f2fbcaa92e4622799dc47d7da5d60bb17699907d61288a93b3c88ba
- SSDEEP 12288:eg/33npArWjfX7XRK7HcfNsTTcMPbDE0YbdHtFUu8spNOtWoy/ZbgD:egf6afTfN2TxzYDFU8/US/ZU
- TLSH T19F05F10A77E94CF9DA27C17DC8528202E77278450735DBDF57A0027B6F236A06E3AB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1