General
- Target 2026-08-20_2a1fa1f06c9650cfd0ba9a1c460f7967_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- Sample260820-wqdhjafa24
- SHA256 063bd02df10095918b53d400efa36ec77b247ae837d8a8d39398cb482fa7537f
- MD5 2a1fa1f06c9650cfd0ba9a1c460f7967
- SHA1 e788e8f6b08f858263863c20a424164953e83958
- SHA512 52ed1a8330fb44b683b0fc378ea63df04fd60e92493000ddaa182cdaffe75702b3a6c263cb85d7cb932e9a2326202275c33e6972e6d1603d3cbb615946791df3
- SSDEEP 49152:e3rWbg5H4Jc+b01tnAyB63TANQnMED6Te8wTzuUwLaHeE4xy/sJ:37PbiHs6ZlaZ4xy/E
- TLSH T128D57C07B3F941ACF0AAE2B8D73156329EB2BC53CB34A9DF125416151E71AE05B38772
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2a1fa1f06c9650cfd0ba9a1c460f7967_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2a1fa1f06c9650cfd0ba9a1c460f7967_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.8MB
- SHA256 063bd02df10095918b53d400efa36ec77b247ae837d8a8d39398cb482fa7537f
- MD5 2a1fa1f06c9650cfd0ba9a1c460f7967
- SHA1 e788e8f6b08f858263863c20a424164953e83958
- SHA512 52ed1a8330fb44b683b0fc378ea63df04fd60e92493000ddaa182cdaffe75702b3a6c263cb85d7cb932e9a2326202275c33e6972e6d1603d3cbb615946791df3
- SSDEEP 49152:e3rWbg5H4Jc+b01tnAyB63TANQnMED6Te8wTzuUwLaHeE4xy/sJ:37PbiHs6ZlaZ4xy/E
- TLSH T128D57C07B3F941ACF0AAE2B8D73156329EB2BC53CB34A9DF125416151E71AE05B38772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory