General
- Target 2026-08-19_8ed900eb37254e109305316559353a89_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260820-aeqstsyyct
- SHA256 9a2484d34d031b2569da709b9deef0269edcd16d9aa68b3efb4a2c758a44acee
- MD5 8ed900eb37254e109305316559353a89
- SHA1 3dca8d6e9f8cb7de7fde28ddebccf5f05df80a2b
- SHA512 584b25e8774eecf485891cf0f582520e0e12afde89f99277e0c64fbff5274d3c30dbb351dfc7dafbeabc0177e705eb8ce21a819b333028c3c67a6d0a3d46fe1e
- SSDEEP 24576:CbiT40VpLP7DhspWcY/0eaKzJwbuqUHyzWS0cWi1/4B/zxC04:CbIfpr7FspHYlzJwbubHyzj1uAN
- TLSH T1B765D01BBAA910EDD069C179CB469132EA71B8461B70B9DF0391932D3E77AE05F3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_8ed900eb37254e109305316559353a89_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_8ed900eb37254e109305316559353a89_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 9a2484d34d031b2569da709b9deef0269edcd16d9aa68b3efb4a2c758a44acee
- MD5 8ed900eb37254e109305316559353a89
- SHA1 3dca8d6e9f8cb7de7fde28ddebccf5f05df80a2b
- SHA512 584b25e8774eecf485891cf0f582520e0e12afde89f99277e0c64fbff5274d3c30dbb351dfc7dafbeabc0177e705eb8ce21a819b333028c3c67a6d0a3d46fe1e
- SSDEEP 24576:CbiT40VpLP7DhspWcY/0eaKzJwbuqUHyzWS0cWi1/4B/zxC04:CbIfpr7FspHYlzJwbubHyzj1uAN
- TLSH T1B765D01BBAA910EDD069C179CB469132EA71B8461B70B9DF0391932D3E77AE05F3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1