General
- Target 2026-08-15_beaaef87046940b98ecbe2e5fe8cc109_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260815-rfjvcayte1
- SHA256 0b570a9535aff944b72f2558609a7717c0f5b5bf4f61a544c644a38ee9e16aca
- MD5 beaaef87046940b98ecbe2e5fe8cc109
- SHA1 6e84ce31d2a3bd58721eb4a93c7848e917ef51bd
- SHA512 3a2e89b78e59cff131b5ce206bf117f4bf342edaa3d06905c5d2aa4a9967eb48bb3283afc897687289efd8a1699542ad3698ae7f0210ceffd0ed76dcbba08bd1
- SSDEEP 49152:CHSmAEaWEzVHEh2bK2pTETMcTZoM+hp8IzbOJLH:CHPN2RCmM+P8IziF
- TLSH T17085CF07B69540FCD06DC1B8CB169532EAB1B8850F31BAEF1390A3692E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_beaaef87046940b98ecbe2e5fe8cc109_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_beaaef87046940b98ecbe2e5fe8cc109_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 0b570a9535aff944b72f2558609a7717c0f5b5bf4f61a544c644a38ee9e16aca
- MD5 beaaef87046940b98ecbe2e5fe8cc109
- SHA1 6e84ce31d2a3bd58721eb4a93c7848e917ef51bd
- SHA512 3a2e89b78e59cff131b5ce206bf117f4bf342edaa3d06905c5d2aa4a9967eb48bb3283afc897687289efd8a1699542ad3698ae7f0210ceffd0ed76dcbba08bd1
- SSDEEP 49152:CHSmAEaWEzVHEh2bK2pTETMcTZoM+hp8IzbOJLH:CHPN2RCmM+P8IziF
- TLSH T17085CF07B69540FCD06DC1B8CB169532EAB1B8850F31BAEF1390A3692E76AE45F3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1