General
- Target 2026-09-04_2276bd6261dd170c3f532243983517c5_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- Sample260905-tzrqeaybld
- SHA256 a4879e047e4062a99677d76cddafda02f5610f81529f300f92d44d5d40905327
- MD5 2276bd6261dd170c3f532243983517c5
- SHA1 c3fdba6e0d0d949fe55684a836f42519f4e1a6d6
- SHA512 d79e35a80a736edd7414c9948eca17b509100baf6a78383ff73d6576de851d9b0d130d6128d773ac41486470ef4d863019203812196e3aa023b9e6292e4d5234
- SSDEEP 12288:Y4/33npArWjfeKlBJxzEOwePRDFDPKOsflH/7jX4/rYuMowqW+e9anpEGVAEwT:Y4f6afeKBdEOjLKJgjBMyeEpat
- TLSH T14205F15A73E94CF5E927C17DC8469602E27278050735CADF13A4027B6F63AE06E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2276bd6261dd170c3f532243983517c5_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_2276bd6261dd170c3f532243983517c5_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_2276bd6261dd170c3f532243983517c5_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- SHA256 a4879e047e4062a99677d76cddafda02f5610f81529f300f92d44d5d40905327
- MD5 2276bd6261dd170c3f532243983517c5
- SHA1 c3fdba6e0d0d949fe55684a836f42519f4e1a6d6
- SHA512 d79e35a80a736edd7414c9948eca17b509100baf6a78383ff73d6576de851d9b0d130d6128d773ac41486470ef4d863019203812196e3aa023b9e6292e4d5234
- SSDEEP 12288:Y4/33npArWjfeKlBJxzEOwePRDFDPKOsflH/7jX4/rYuMowqW+e9anpEGVAEwT:Y4f6afeKBdEOjLKJgjBMyeEpat
- TLSH T14205F15A73E94CF5E927C17DC8469602E27278050735CADF13A4027B6F63AE06E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1