General
- Target 2026-08-21_8a17e66820a809594ca75eeba5571dc9_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 3.8MB
- Sample260822-m5ejpsgl7s
- SHA256 b2b56ba188420b70a224100c2222130bdde510254b470ef87e8903f71624ee9f
- MD5 8a17e66820a809594ca75eeba5571dc9
- SHA1 63caded78170ea5797167a8bd00f4264d69a9b68
- SHA512 81cdcaf82389c3bb8c2dce51423ed80f228a6d237da2892deb8437a2dc8a5b98365773c11c08481342a1cd8dbcc2c297742084d64258ce1796ccf737be96e6e8
- SSDEEP 49152:hKmIwSHSPh7YSZzjMgE+udyWSdacB9g4cUA/EazEkKWoH5yQFXzTLGKK3kOU6:gmxrc23T765EkKWoPF3v/c
- TLSH T139069C13F29900D8D05DD179879A9632EAB2BC85073076DF0690B7662F7BEE06B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_8a17e66820a809594ca75eeba5571dc9_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_8a17e66820a809594ca75eeba5571dc9_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_8a17e66820a809594ca75eeba5571dc9_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 3.8MB
- SHA256 b2b56ba188420b70a224100c2222130bdde510254b470ef87e8903f71624ee9f
- MD5 8a17e66820a809594ca75eeba5571dc9
- SHA1 63caded78170ea5797167a8bd00f4264d69a9b68
- SHA512 81cdcaf82389c3bb8c2dce51423ed80f228a6d237da2892deb8437a2dc8a5b98365773c11c08481342a1cd8dbcc2c297742084d64258ce1796ccf737be96e6e8
- SSDEEP 49152:hKmIwSHSPh7YSZzjMgE+udyWSdacB9g4cUA/EazEkKWoH5yQFXzTLGKK3kOU6:gmxrc23T765EkKWoPF3v/c
- TLSH T139069C13F29900D8D05DD179879A9632EAB2BC85073076DF0690B7662F7BEE06B3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1