General
- Target 2026-08-16_4eedf3d8eae3acde5adf224f1d06e4d0_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260816-e9wd1sz1cv
- SHA256 77cc8731b529943ac8100d653495135a607606954029d83073b2467ca15f9be3
- MD5 4eedf3d8eae3acde5adf224f1d06e4d0
- SHA1 860750b10345ef14357a88013099fd3ec9450817
- SHA512 a16616662401c4274372b1a479b327fa7e0ec8982b0be780f8c18897ae5696c2e28bb4c4ec277ae5a5d69500fe7cba21b1951276445f9475af84793225cfa5b9
- SSDEEP 24576:p1T0AYyrg9Wx/tEX6PoC0jIMu2sSaERPX18tnJBggH:pV0AYZWxyXGohjIMlsFExlKJ3
- TLSH T13F75BF0BB15518EAC2A9C074CE16C531A762BC5E0BF269FB3581F2D92D36AD07F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_4eedf3d8eae3acde5adf224f1d06e4d0_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_4eedf3d8eae3acde5adf224f1d06e4d0_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 77cc8731b529943ac8100d653495135a607606954029d83073b2467ca15f9be3
- MD5 4eedf3d8eae3acde5adf224f1d06e4d0
- SHA1 860750b10345ef14357a88013099fd3ec9450817
- SHA512 a16616662401c4274372b1a479b327fa7e0ec8982b0be780f8c18897ae5696c2e28bb4c4ec277ae5a5d69500fe7cba21b1951276445f9475af84793225cfa5b9
- SSDEEP 24576:p1T0AYyrg9Wx/tEX6PoC0jIMu2sSaERPX18tnJBggH:pV0AYZWxyXGohjIMlsFExlKJ3
- TLSH T13F75BF0BB15518EAC2A9C074CE16C531A762BC5E0BF269FB3581F2D92D36AD07F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1