General
- Target 2026-08-16_e27df5a00c6e01b91265e115906ec785_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- Sample260816-227hmsgd69
- SHA256 85147b11ef0319b054dbadc0d36627e27f02bf8b0c12a668f94c9fb572226cf2
- MD5 e27df5a00c6e01b91265e115906ec785
- SHA1 11120b669b1c5c266c0ed1dc4cd9e42224a6a022
- SHA512 22821a3ce67d4507fb614eb120ffaabaf39541dc57e3533c10025694724df6e0c5c757a1e6e476145e13b4f5174368300eee20dc2e0a1d3e9451fbb9ca2294ea
- SSDEEP 12288:B+/33npArWjfHps7MkFbNHk1oq+P2vSQRTsWRpDZAU/NmHtHcNERJmzfCYku:B+f6afy7bNX+qIYU/vGm5F
- TLSH T13A05F10A77E84CF9E957C1798CC24605E2727C494731DADF53A0027B6F23AA16E39F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e27df5a00c6e01b91265e115906ec785_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e27df5a00c6e01b91265e115906ec785_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- SHA256 85147b11ef0319b054dbadc0d36627e27f02bf8b0c12a668f94c9fb572226cf2
- MD5 e27df5a00c6e01b91265e115906ec785
- SHA1 11120b669b1c5c266c0ed1dc4cd9e42224a6a022
- SHA512 22821a3ce67d4507fb614eb120ffaabaf39541dc57e3533c10025694724df6e0c5c757a1e6e476145e13b4f5174368300eee20dc2e0a1d3e9451fbb9ca2294ea
- SSDEEP 12288:B+/33npArWjfHps7MkFbNHk1oq+P2vSQRTsWRpDZAU/NmHtHcNERJmzfCYku:B+f6afy7bNX+qIYU/vGm5F
- TLSH T13A05F10A77E84CF9E957C1798CC24605E2727C494731DADF53A0027B6F23AA16E39F61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1