General
- Target 2026-08-17_1ba2d5d3fbd95866fb7039c86c193c7f_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- Sample260817-d9fg5asfph
- SHA256 8dae07072c00b86e2bac6267c66d61ee52eab124485fdd8af45299c23aa08a5d
- MD5 1ba2d5d3fbd95866fb7039c86c193c7f
- SHA1 475510f6066a2a0b142a13c3eb4c5f91fc578e3f
- SHA512 073d0a5c98a0ed8b355c7f3ad9f7067c3ea23955504877d458cc69a5524bd8446c9cc99fb5563520b050ce70b537254069ac101f80a27fa761a32de242041652
- SSDEEP 49152:EE5PV6kD4Jc+b01tnAyB63TANQnMED6Te8wTsmmYkNW6kOXpjG:3MPbiHs6Zl/NoGpjG
- TLSH T151D57C07B3F941ECF0AAE2B8D73156329EB2BC52CB34A5DF125416151E71AE05B38B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_1ba2d5d3fbd95866fb7039c86c193c7f_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_1ba2d5d3fbd95866fb7039c86c193c7f_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- SHA256 8dae07072c00b86e2bac6267c66d61ee52eab124485fdd8af45299c23aa08a5d
- MD5 1ba2d5d3fbd95866fb7039c86c193c7f
- SHA1 475510f6066a2a0b142a13c3eb4c5f91fc578e3f
- SHA512 073d0a5c98a0ed8b355c7f3ad9f7067c3ea23955504877d458cc69a5524bd8446c9cc99fb5563520b050ce70b537254069ac101f80a27fa761a32de242041652
- SSDEEP 49152:EE5PV6kD4Jc+b01tnAyB63TANQnMED6Te8wTsmmYkNW6kOXpjG:3MPbiHs6Zl/NoGpjG
- TLSH T151D57C07B3F941ECF0AAE2B8D73156329EB2BC52CB34A5DF125416151E71AE05B38B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1