General
- Target 2026-08-23_b5cd2bdb9351e918a17ffd48680df255_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.6MB
- Sample260825-2epz3ser5z
- SHA256 257291ffc0282a1e58813a8cd75e1cd2e42c42b328b3d10e55a220f799e80f31
- MD5 b5cd2bdb9351e918a17ffd48680df255
- SHA1 e833adefaaf9dbef764d42adf7bc73ad6d1aea2c
- SHA512 ffc6dc656a399d7039f8dae7797c83ceb54a2a59dbdf4f81d6897a1e44b140fd6439c032020ed8109956fefcd7793be656b9582f5a7a0846053f9c204f92a257
- SSDEEP 49152:pMxjjxXD2C2FG5UwyT3KPhSkC2LIx6OwGgDUYmvFur31yAipQCtXxc0H:qYoyTchu4zU7dG1yfpVBlH
- TLSH T172C5AD13F2D901D8D06AC578C74A9232EA62BC890B25B6DF0790B3552F77EE49BBD710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_b5cd2bdb9351e918a17ffd48680df255_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_b5cd2bdb9351e918a17ffd48680df255_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.6MB
- SHA256 257291ffc0282a1e58813a8cd75e1cd2e42c42b328b3d10e55a220f799e80f31
- MD5 b5cd2bdb9351e918a17ffd48680df255
- SHA1 e833adefaaf9dbef764d42adf7bc73ad6d1aea2c
- SHA512 ffc6dc656a399d7039f8dae7797c83ceb54a2a59dbdf4f81d6897a1e44b140fd6439c032020ed8109956fefcd7793be656b9582f5a7a0846053f9c204f92a257
- SSDEEP 49152:pMxjjxXD2C2FG5UwyT3KPhSkC2LIx6OwGgDUYmvFur31yAipQCtXxc0H:qYoyTchu4zU7dG1yfpVBlH
- TLSH T172C5AD13F2D901D8D06AC578C74A9232EA62BC890B25B6DF0790B3552F77EE49BBD710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1