General
- Target 2026-08-19_ce9acf3188279e4a9e349d89814d1efb_cobalt-strike_icedid_njrat_vidar
- Size 2.8MB
- Sample260819-1xpllaan2y
- SHA256 8187840caad30aa8d715672da66e385640f482a1d493e2d0a3cf968f34cd5610
- MD5 ce9acf3188279e4a9e349d89814d1efb
- SHA1 fba512ea0eac06771a10a7df007fa11af84d94ea
- SHA512 cbdb276d8b41be378c620b311b9339bf0e82cbeccf27435a3af40b64818cba33bf1f518b95191e0754c0eb1ba5fdeecb95e6ed7c488b00d6519a523ffa7745e0
- SSDEEP 49152:7Tx9oYYsaXagS9kllZUUFr+1LNiXicJFFRGNzj3:7d9oP7kU817wRGpj3
- TLSH T1E4D52A9B66E721E5C9A2D139D612E601F8E33FF303116BE7119C48A60F2BDE9057EE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ce9acf3188279e4a9e349d89814d1efb_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ce9acf3188279e4a9e349d89814d1efb_cobalt-strike_icedid_njrat_vidar
- Size 2.8MB
- SHA256 8187840caad30aa8d715672da66e385640f482a1d493e2d0a3cf968f34cd5610
- MD5 ce9acf3188279e4a9e349d89814d1efb
- SHA1 fba512ea0eac06771a10a7df007fa11af84d94ea
- SHA512 cbdb276d8b41be378c620b311b9339bf0e82cbeccf27435a3af40b64818cba33bf1f518b95191e0754c0eb1ba5fdeecb95e6ed7c488b00d6519a523ffa7745e0
- SSDEEP 49152:7Tx9oYYsaXagS9kllZUUFr+1LNiXicJFFRGNzj3:7d9oP7kU817wRGpj3
- TLSH T1E4D52A9B66E721E5C9A2D139D612E601F8E33FF303116BE7119C48A60F2BDE9057EE11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1