General
- Target 2026-08-24_23d0994bc393f2fffd5ddd1b523f2a0d_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.1MB
- Sample260825-vrfhvaszex
- SHA256 d21d731b7204a4447cf2ed67d42a76a957ed324ce1cd2acdc7de784a3a6a2ffd
- MD5 23d0994bc393f2fffd5ddd1b523f2a0d
- SHA1 35df097b03da17cda8970a2b704325c939f894a5
- SHA512 b1b31117cdd1f178d4e729fcbf1cfcdf756903074d9be08b8ebfbcfc47367325cc2685ce143a36f3399ce079334628be0092981cfa100234a665bd3897f136b7
- SSDEEP 24576:zEMymkbJ2PoarFsTr8TaiIBgyyxknw4FYnshx8OfVe247:PymVga0r8TRx4x8EVep
- TLSH T17E45E059A7E801F4E0B7D675CAA24117F7B7780667708B5F03A4865B2F336A08F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_23d0994bc393f2fffd5ddd1b523f2a0d_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_23d0994bc393f2fffd5ddd1b523f2a0d_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_23d0994bc393f2fffd5ddd1b523f2a0d_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.1MB
- SHA256 d21d731b7204a4447cf2ed67d42a76a957ed324ce1cd2acdc7de784a3a6a2ffd
- MD5 23d0994bc393f2fffd5ddd1b523f2a0d
- SHA1 35df097b03da17cda8970a2b704325c939f894a5
- SHA512 b1b31117cdd1f178d4e729fcbf1cfcdf756903074d9be08b8ebfbcfc47367325cc2685ce143a36f3399ce079334628be0092981cfa100234a665bd3897f136b7
- SSDEEP 24576:zEMymkbJ2PoarFsTr8TaiIBgyyxknw4FYnshx8OfVe247:PymVga0r8TRx4x8EVep
- TLSH T17E45E059A7E801F4E0B7D675CAA24117F7B7780667708B5F03A4865B2F336A08F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1