General
- Target 2026-08-16_881c93ce7ca729528d514b370ad3f0b8_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.6MB
- Sample260816-q573sscl2s
- SHA256 e4c245e36b323eb2c293481dacc7107f8bd90e80976ff0e8fdea645e6ae9fb48
- MD5 881c93ce7ca729528d514b370ad3f0b8
- SHA1 e129545353b9ee8efb3790c19a240273b57c5b16
- SHA512 ee14ac39be5a5341af56e8daa6150e9647ae9ed913904f2ce625d268dbc518b88b3798025d6be7c67d67cc9c825aa88c7c97cbb6ae27ae163c93248016563d3d
- SSDEEP 49152:6pxjjxXD2C2FG5UfyT3KPhSkC2LIx6Ow7OHK9rshP9t49AmT:SYHyTchu47o2sqv
- TLSH T1B6C59D03F2D901E8D06AD578C74A9232EA62BC490B35B6DF0790B3552E77EE49BBD710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_881c93ce7ca729528d514b370ad3f0b8_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_881c93ce7ca729528d514b370ad3f0b8_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.6MB
- SHA256 e4c245e36b323eb2c293481dacc7107f8bd90e80976ff0e8fdea645e6ae9fb48
- MD5 881c93ce7ca729528d514b370ad3f0b8
- SHA1 e129545353b9ee8efb3790c19a240273b57c5b16
- SHA512 ee14ac39be5a5341af56e8daa6150e9647ae9ed913904f2ce625d268dbc518b88b3798025d6be7c67d67cc9c825aa88c7c97cbb6ae27ae163c93248016563d3d
- SSDEEP 49152:6pxjjxXD2C2FG5UfyT3KPhSkC2LIx6Ow7OHK9rshP9t49AmT:SYHyTchu47o2sqv
- TLSH T1B6C59D03F2D901E8D06AD578C74A9232EA62BC490B35B6DF0790B3552E77EE49BBD710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1