General
- Target 2026-08-15_1c023230edec231e60e2552bf072bdf6_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260815-prcjaswfpd
- SHA256 344297a39a5ed9443f77ab32e44004494b4659edba8239537c1f1ead35702e86
- MD5 1c023230edec231e60e2552bf072bdf6
- SHA1 e7b7bc7d61764098064722912e151cce67b989cf
- SHA512 fb09798a81413801102775c28b4208f25237ddb6b353b2ce68ec9bd98e0d11cdae35c2224538b886fdfdd1c06051391de4cb0f7f5174ca4c9d4bf877d32c7f2a
- SSDEEP 24576:d9c/00VpLP7DhspWcY/0eavTcZorwN9xqoInSgp8IG7cWuOJLH8:d9ebpr7FspHYMwZoM+hp8IzbOJLH
- TLSH T18E65CF1BBAA910FDD06DC179C7469232EA71B8460B70BAEF0391D2693E776E05F39710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_1c023230edec231e60e2552bf072bdf6_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1c023230edec231e60e2552bf072bdf6_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 344297a39a5ed9443f77ab32e44004494b4659edba8239537c1f1ead35702e86
- MD5 1c023230edec231e60e2552bf072bdf6
- SHA1 e7b7bc7d61764098064722912e151cce67b989cf
- SHA512 fb09798a81413801102775c28b4208f25237ddb6b353b2ce68ec9bd98e0d11cdae35c2224538b886fdfdd1c06051391de4cb0f7f5174ca4c9d4bf877d32c7f2a
- SSDEEP 24576:d9c/00VpLP7DhspWcY/0eavTcZorwN9xqoInSgp8IG7cWuOJLH8:d9ebpr7FspHYMwZoM+hp8IzbOJLH
- TLSH T18E65CF1BBAA910FDD06DC179C7469232EA71B8460B70BAEF0391D2693E776E05F39710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1