General
- Target 2026-08-19_bd643d2ba38a5568719a9131d2ecd855_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260819-bwfvmathja
- SHA256 31a839919d033a80d5c95116ba3fb664b3d143e21517c1594d6e6e8927676569
- MD5 bd643d2ba38a5568719a9131d2ecd855
- SHA1 4c2bb2d19c71837f6a91959f5eb56859a425483a
- SHA512 a7db50577c29f798eb7190ee655eafeaa9c3d6e9f5f8380991ad657a07ea8595c6976535f3723dc1a6b2e21c0916d4bdee71a851d468fd5e81a775d612e5aacc
- SSDEEP 24576:/Eqqr0VpLP7DhspWcY/0earKlWD4s7zoKgbEfFF4Oy9fWuQ:/ERGpr7FspHYb6/oU4Q
- TLSH T16A65D01BB6A900FDD029C179C7469232EA71B8460B70BAEF0391D3693E776E45F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_bd643d2ba38a5568719a9131d2ecd855_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_bd643d2ba38a5568719a9131d2ecd855_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 31a839919d033a80d5c95116ba3fb664b3d143e21517c1594d6e6e8927676569
- MD5 bd643d2ba38a5568719a9131d2ecd855
- SHA1 4c2bb2d19c71837f6a91959f5eb56859a425483a
- SHA512 a7db50577c29f798eb7190ee655eafeaa9c3d6e9f5f8380991ad657a07ea8595c6976535f3723dc1a6b2e21c0916d4bdee71a851d468fd5e81a775d612e5aacc
- SSDEEP 24576:/Eqqr0VpLP7DhspWcY/0earKlWD4s7zoKgbEfFF4Oy9fWuQ:/ERGpr7FspHYb6/oU4Q
- TLSH T16A65D01BB6A900FDD029C179C7469232EA71B8460B70BAEF0391D3693E776E45F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1