General
- Target 2026-08-19_4dcc612c1a64e82da40f5c3aa930acea_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- Sample260820-b72apsdk6w
- SHA256 3347d0905d735e8aa1da5125c96fbdfceba1dc78a8cff564fb52290b75a6280d
- MD5 4dcc612c1a64e82da40f5c3aa930acea
- SHA1 822d8eea610e6e172fdf183e5f55596c1278d8df
- SHA512 c32b5488bb59a736273d6dfeeb96d39b365dd3ec3a8c422fdda58bf8c9728289a9dc317bbd7aec887df1fb955c7cc524f926053bbefbe5f928f3ffcf22d2af9f
- SSDEEP 24576:4E7430VpLP7DhspWcY/0eaWdpIUpOuBfpP+08m/UHZwhbc6mlmPFAp3N:4EEypr7FspHY9jIUpOip2uUHZwlcblmO
- TLSH T17565CF1BBA6900FDD069C179C7469232EAB1B8460B70B9EF0391D2693E776E45F39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_4dcc612c1a64e82da40f5c3aa930acea_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_4dcc612c1a64e82da40f5c3aa930acea_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_4dcc612c1a64e82da40f5c3aa930acea_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.4MB
- SHA256 3347d0905d735e8aa1da5125c96fbdfceba1dc78a8cff564fb52290b75a6280d
- MD5 4dcc612c1a64e82da40f5c3aa930acea
- SHA1 822d8eea610e6e172fdf183e5f55596c1278d8df
- SHA512 c32b5488bb59a736273d6dfeeb96d39b365dd3ec3a8c422fdda58bf8c9728289a9dc317bbd7aec887df1fb955c7cc524f926053bbefbe5f928f3ffcf22d2af9f
- SSDEEP 24576:4E7430VpLP7DhspWcY/0eaWdpIUpOuBfpP+08m/UHZwhbc6mlmPFAp3N:4EEypr7FspHY9jIUpOip2uUHZwlcblmO
- TLSH T17565CF1BBA6900FDD069C179C7469232EAB1B8460B70B9EF0391D2693E776E45F39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1