General
- Target 2026-08-16_eb957be06dbee92babb2a9af96b57b9d_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- Sample260816-pr879sbj5t
- SHA256 c3dbf6a4683747de60d7dfd948e20e61b87db4824d0eeb549fc3159a480d4470
- MD5 eb957be06dbee92babb2a9af96b57b9d
- SHA1 14da1426b42c98f6e337ed13d43ab8f363c8802f
- SHA512 ed68877a615ca3ed4e676baed766b982a8147bb984264d3b96dfa34182c328b658b4a3e64fc22a568dc90eab245ee6b581080d8cc50034e20da4dec549de6a0c
- SSDEEP 49152:6mzSJw/eE33aj5TfDm9N7GdOQZ1h5nSAD+0iXI:tf733ajXtnSAD+dI
- TLSH T141B5BD13F6C941E9D06EC174974A9132EA62BC4A1B34B6EF0790B35A2E77EE05B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_eb957be06dbee92babb2a9af96b57b9d_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_eb957be06dbee92babb2a9af96b57b9d_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.2MB
- SHA256 c3dbf6a4683747de60d7dfd948e20e61b87db4824d0eeb549fc3159a480d4470
- MD5 eb957be06dbee92babb2a9af96b57b9d
- SHA1 14da1426b42c98f6e337ed13d43ab8f363c8802f
- SHA512 ed68877a615ca3ed4e676baed766b982a8147bb984264d3b96dfa34182c328b658b4a3e64fc22a568dc90eab245ee6b581080d8cc50034e20da4dec549de6a0c
- SSDEEP 49152:6mzSJw/eE33aj5TfDm9N7GdOQZ1h5nSAD+0iXI:tf733ajXtnSAD+dI
- TLSH T141B5BD13F6C941E9D06EC174974A9132EA62BC4A1B34B6EF0790B35A2E77EE05B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory