General
- Target 2026-08-20_0d91d80740959afc3919b1b72922c689_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.7MB
- Sample260820-y5rd2sak91
- SHA256 034dafcfb680d906c94c49d4f1a62c7989cf911d980d37d9e83dc4b040f5ce33
- MD5 0d91d80740959afc3919b1b72922c689
- SHA1 21229b3f0d3b9ced593d1f32fdaf800c490c466c
- SHA512 84017eaa1999912263412f66f119e704d9802f12df3a1c95c1abb9da03f18762bf53ec8b76eea5e357e3e3cf2a8c3ff994ca6a418fe7e5588721a0a79693e7d1
- SSDEEP 24576:5BYGb8ayt3A6nzSpJ/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:gI8nA6MLNiXicJFFRGNzj3
- TLSH T1E485D05567E500B8E1F7E538C9A34902E77B7C094270DA8F03E8957B2F776909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0d91d80740959afc3919b1b72922c689_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0d91d80740959afc3919b1b72922c689_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0d91d80740959afc3919b1b72922c689_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.7MB
- SHA256 034dafcfb680d906c94c49d4f1a62c7989cf911d980d37d9e83dc4b040f5ce33
- MD5 0d91d80740959afc3919b1b72922c689
- SHA1 21229b3f0d3b9ced593d1f32fdaf800c490c466c
- SHA512 84017eaa1999912263412f66f119e704d9802f12df3a1c95c1abb9da03f18762bf53ec8b76eea5e357e3e3cf2a8c3ff994ca6a418fe7e5588721a0a79693e7d1
- SSDEEP 24576:5BYGb8ayt3A6nzSpJ/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:gI8nA6MLNiXicJFFRGNzj3
- TLSH T1E485D05567E500B8E1F7E538C9A34902E77B7C094270DA8F03E8957B2F776909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1