General
- Target 2026-08-15_1014f67c94f318720645be424760ce5b_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- Sample260815-tes3qszbmc
- SHA256 2eccb04503fe97ce2d761de98996fa0d69097f41995051a8e4d4b8504ae3cd02
- MD5 1014f67c94f318720645be424760ce5b
- SHA1 741640affe8132855e9f9bf68afea432fe2cb542
- SHA512 15a67b2b2426881607f7e5e31fb5a83aada80f7ec4a67e8792c8301c16340e4723f1a56805f2eac5b349917c2f19591a895a016386e0f71b1557ba989280763b
- SSDEEP 12288:x1/33npArWjfKr1wggxCsInVH+9x509UcXUEmD8AzjkupGH29Wx1XWvPu5umK:x1f6afTP8nqB/60W1XhK
- TLSH T1A505F05A73E84CF9D563C13DC9428216E7B278450B31DADF1BA4027B2F236E19E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_1014f67c94f318720645be424760ce5b_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_1014f67c94f318720645be424760ce5b_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_1014f67c94f318720645be424760ce5b_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- SHA256 2eccb04503fe97ce2d761de98996fa0d69097f41995051a8e4d4b8504ae3cd02
- MD5 1014f67c94f318720645be424760ce5b
- SHA1 741640affe8132855e9f9bf68afea432fe2cb542
- SHA512 15a67b2b2426881607f7e5e31fb5a83aada80f7ec4a67e8792c8301c16340e4723f1a56805f2eac5b349917c2f19591a895a016386e0f71b1557ba989280763b
- SSDEEP 12288:x1/33npArWjfKr1wggxCsInVH+9x509UcXUEmD8AzjkupGH29Wx1XWvPu5umK:x1f6afTP8nqB/60W1XhK
- TLSH T1A505F05A73E84CF9D563C13DC9428216E7B278450B31DADF1BA4027B2F236E19E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1