General
- Target 2026-08-14_1541e1c4a7c4f70bc6e1568f50cdf229_cobalt-strike_icedid_njrat_satacom_vidar
- Size 830KB
- Sample260814-rl11taac64
- SHA256 41de2b7632a575dab12235cf144bf10f842d528061e4f18dbc4699f1a51c8052
- MD5 1541e1c4a7c4f70bc6e1568f50cdf229
- SHA1 d55fd3dbae541738c7b35065835616fc3d6cb302
- SHA512 c82564f545a85e76f866154af36c405e5cc9fdbe4a8743d313c5487654ee2de3f91172dcffa951bee4a297f6762726c4428d403ca9bc9f8a93ef73c96771be8f
- SSDEEP 24576:We8q+VSsL+X0Djsf9nz4mloFQnpXUMPQDR6q79dA:WbVFpDYf5zaCpXxPuR6E9dA
- TLSH T17205F159B7A40CF9E833523C88528601E7B2BC161B75EABF13A04257DF336919D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_1541e1c4a7c4f70bc6e1568f50cdf229_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_1541e1c4a7c4f70bc6e1568f50cdf229_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_1541e1c4a7c4f70bc6e1568f50cdf229_cobalt-strike_icedid_njrat_satacom_vidar
- Size 830KB
- SHA256 41de2b7632a575dab12235cf144bf10f842d528061e4f18dbc4699f1a51c8052
- MD5 1541e1c4a7c4f70bc6e1568f50cdf229
- SHA1 d55fd3dbae541738c7b35065835616fc3d6cb302
- SHA512 c82564f545a85e76f866154af36c405e5cc9fdbe4a8743d313c5487654ee2de3f91172dcffa951bee4a297f6762726c4428d403ca9bc9f8a93ef73c96771be8f
- SSDEEP 24576:We8q+VSsL+X0Djsf9nz4mloFQnpXUMPQDR6q79dA:WbVFpDYf5zaCpXxPuR6E9dA
- TLSH T17205F159B7A40CF9E833523C88528601E7B2BC161B75EABF13A04257DF336919D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1