General
- Target 2026-08-17_5f8ccde656d9d922173e7eaf1b300152_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- Sample260817-g6lrhsvdjd
- SHA256 2e1e2558866c0c03fdd4bce8e018830fdd411c287fc971d6bad77660eb5c3dcc
- MD5 5f8ccde656d9d922173e7eaf1b300152
- SHA1 ae83346a078eee99577991f2dcb510ef0364740d
- SHA512 2378de3c370a1a1785bb08da578765bf01e069323562c0294710422ec18c7df3d45d8a636b649a54c054ca58eb0b4a63e1dd51be0c4e8187956ff67843074483
- SSDEEP 49152:eHkdY65+4Jc+b01tnAyB63TANQnMED6Te8wTZhBCD/fxkAqy:6wPbiHs6ZShBCDnlt
- TLSH T170D57C07B3F941ECF0AAE2B8D73156329EB2BC52CB34A5DF125416151E71AE05B38B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_5f8ccde656d9d922173e7eaf1b300152_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_5f8ccde656d9d922173e7eaf1b300152_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- SHA256 2e1e2558866c0c03fdd4bce8e018830fdd411c287fc971d6bad77660eb5c3dcc
- MD5 5f8ccde656d9d922173e7eaf1b300152
- SHA1 ae83346a078eee99577991f2dcb510ef0364740d
- SHA512 2378de3c370a1a1785bb08da578765bf01e069323562c0294710422ec18c7df3d45d8a636b649a54c054ca58eb0b4a63e1dd51be0c4e8187956ff67843074483
- SSDEEP 49152:eHkdY65+4Jc+b01tnAyB63TANQnMED6Te8wTZhBCD/fxkAqy:6wPbiHs6ZShBCDnlt
- TLSH T170D57C07B3F941ECF0AAE2B8D73156329EB2BC52CB34A5DF125416151E71AE05B38B72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory