General
- Target 2026-08-23_33525a0336020d69c6ef58ea85fc62f7_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- Sample260824-rrbccazajd
- SHA256 b8b2b18c27fb9d75d2a2b972fc36ca693c6106e261b2dcaf4e9a758bd0cf7ea5
- MD5 33525a0336020d69c6ef58ea85fc62f7
- SHA1 64fc3d15480faea2b9a0d323d72d263d71446cce
- SHA512 f69299070277f2275de836e50769c28f790aa244fc4a7ac0ee417f0e3a56bf82ad519d6e1fd3e2216087246db0c6f0bdd4061d6567c6ccd850d60a4c18c7055e
- SSDEEP 12288:tYMri1GOJdlrqJ0tclYYZ3sieQc52oIBlEhw1y58cergwIgnbhy4kg+w5fojnW+x:tYMrE8Hd3KnAoIBlEq1tIgAWz5foj3Z
- TLSH T16695E015F7A804E8F5B792388A729902EB767C550730C5DF13A486667F33AE09D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_33525a0336020d69c6ef58ea85fc62f7_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_33525a0336020d69c6ef58ea85fc62f7_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- SHA256 b8b2b18c27fb9d75d2a2b972fc36ca693c6106e261b2dcaf4e9a758bd0cf7ea5
- MD5 33525a0336020d69c6ef58ea85fc62f7
- SHA1 64fc3d15480faea2b9a0d323d72d263d71446cce
- SHA512 f69299070277f2275de836e50769c28f790aa244fc4a7ac0ee417f0e3a56bf82ad519d6e1fd3e2216087246db0c6f0bdd4061d6567c6ccd850d60a4c18c7055e
- SSDEEP 12288:tYMri1GOJdlrqJ0tclYYZ3sieQc52oIBlEhw1y58cergwIgnbhy4kg+w5fojnW+x:tYMrE8Hd3KnAoIBlEq1tIgAWz5foj3Z
- TLSH T16695E015F7A804E8F5B792388A729902EB767C550730C5DF13A486667F33AE09D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory