General
- Target 2026-08-18_7a16070eec19f922e3873c50dfd81297_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260818-p7ch8ssfqf
- SHA256 0937f8c8ab8b89d5d85314e9a255acd77bf5e9e5f863ddddc403418695066b4c
- MD5 7a16070eec19f922e3873c50dfd81297
- SHA1 08e3ac20cd23992e1f53fe1fff7f966a258a79ff
- SHA512 90a4676d170e0e576f7f52bddfa930d52220520c6149a65b144757388b14a051ec698f29eca470110ceff0b45a4d232983c8fe893e7dd94a58c89c3fff79d039
- SSDEEP 24576:qyT0AYynE9Wx/tEX6PoC0jIMuJaD4+11xxRXd9BTCEggAEGS:qy0AYJWxyXGohjIMSaD4+DXDb
- TLSH T15375BF1BB25518EAC2A5C074CE16D131A761BC4D0BF269FB3581F2D92D36AE07F3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_7a16070eec19f922e3873c50dfd81297_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_7a16070eec19f922e3873c50dfd81297_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 0937f8c8ab8b89d5d85314e9a255acd77bf5e9e5f863ddddc403418695066b4c
- MD5 7a16070eec19f922e3873c50dfd81297
- SHA1 08e3ac20cd23992e1f53fe1fff7f966a258a79ff
- SHA512 90a4676d170e0e576f7f52bddfa930d52220520c6149a65b144757388b14a051ec698f29eca470110ceff0b45a4d232983c8fe893e7dd94a58c89c3fff79d039
- SSDEEP 24576:qyT0AYynE9Wx/tEX6PoC0jIMuJaD4+11xxRXd9BTCEggAEGS:qy0AYJWxyXGohjIMSaD4+DXDb
- TLSH T15375BF1BB25518EAC2A5C074CE16D131A761BC4D0BF269FB3581F2D92D36AE07F3AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory