General
- Target 2026-08-21_96c1b73115cb74f66cc0a17f2ea1f4be_cobalt-strike_icedid_njrat_stealc_vidar
- Size 1.2MB
- Sample260821-b3b51sem4s
- SHA256 901d8ebd7df78b9500c7753c9c96961fe1479d08fea1e76cd3efb49266b82794
- MD5 96c1b73115cb74f66cc0a17f2ea1f4be
- SHA1 32148788f2e497dcc274e54c801863e3e1dec9f9
- SHA512 d27ba7753120d1348e47e6b1c688041a550af717fee1b979c10094ea6cfe3f8a5a44abc1d5e65852fa067c3a8f6313b1da0d5fde8e2e462a575a436d03d70db2
- SSDEEP 24576:C3WpRwENzlNhcDmVpKdwqrj/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:1umV06ELNiXicJFFRGNzj3
- TLSH T19A459C4263EC42E4F1F3A6389972455ADB72BC615B39C6CF0254561E1E73AD08E3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_96c1b73115cb74f66cc0a17f2ea1f4be_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_96c1b73115cb74f66cc0a17f2ea1f4be_cobalt-strike_icedid_njrat_stealc_vidar
- Size 1.2MB
- SHA256 901d8ebd7df78b9500c7753c9c96961fe1479d08fea1e76cd3efb49266b82794
- MD5 96c1b73115cb74f66cc0a17f2ea1f4be
- SHA1 32148788f2e497dcc274e54c801863e3e1dec9f9
- SHA512 d27ba7753120d1348e47e6b1c688041a550af717fee1b979c10094ea6cfe3f8a5a44abc1d5e65852fa067c3a8f6313b1da0d5fde8e2e462a575a436d03d70db2
- SSDEEP 24576:C3WpRwENzlNhcDmVpKdwqrj/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:1umV06ELNiXicJFFRGNzj3
- TLSH T19A459C4263EC42E4F1F3A6389972455ADB72BC615B39C6CF0254561E1E73AD08E3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1