General
- Target 2026-08-19_9628b03754071ff30f789061735842de_cobalt-strike_icedid_njrat_stealc_vidar
- Size 1.4MB
- Sample260820-adn8lswepf
- SHA256 ef1784b0b6f2fa0c53362d465a8e9a98ff1debc70d153e52a185f04442be1a5f
- MD5 9628b03754071ff30f789061735842de
- SHA1 9d71ebf176400ced5749a37bcd2b250f0072e01f
- SHA512 a75b041bf8fcd65cb05cd53eb340ccb0412dbbec9e81b96ba8a92c2fe54b047522cc7b39d4690695553076732c6730df716fed157fbe300d9d923493a1068306
- SSDEEP 24576:CbsMYrrdTsVZFnDyJpdrVfS38hDuVqdEB/kau8qtL+SgvqFE1d3ddJW3CAqPSbwL:CPyJfVfmcDOSElNu8q0re0d37JWyAqAu
- TLSH T11465BE2EA35C41F9D5B7E178C9864A4AE3717447577186CB03A106BA3F2B6F14E3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_9628b03754071ff30f789061735842de_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_9628b03754071ff30f789061735842de_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_9628b03754071ff30f789061735842de_cobalt-strike_icedid_njrat_stealc_vidar
- Size 1.4MB
- SHA256 ef1784b0b6f2fa0c53362d465a8e9a98ff1debc70d153e52a185f04442be1a5f
- MD5 9628b03754071ff30f789061735842de
- SHA1 9d71ebf176400ced5749a37bcd2b250f0072e01f
- SHA512 a75b041bf8fcd65cb05cd53eb340ccb0412dbbec9e81b96ba8a92c2fe54b047522cc7b39d4690695553076732c6730df716fed157fbe300d9d923493a1068306
- SSDEEP 24576:CbsMYrrdTsVZFnDyJpdrVfS38hDuVqdEB/kau8qtL+SgvqFE1d3ddJW3CAqPSbwL:CPyJfVfmcDOSElNu8q0re0d37JWyAqAu
- TLSH T11465BE2EA35C41F9D5B7E178C9864A4AE3717447577186CB03A106BA3F2B6F14E3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1