General
- Target 2026-09-04_09e671a92fc9888a2125360a606d46ee_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- Sample260905-xpcehsgr4v
- SHA256 c4c3ceb96b02e52cbfed253049cea25f5fa4a27802f1c33b0f8bd99ebce05798
- MD5 09e671a92fc9888a2125360a606d46ee
- SHA1 983edc5761f598370dbf758474e209d8381cbff3
- SHA512 42d37a1121466901b37ed9c0aa279c9be852d8a1a909691f10d5e650c69e19f758d10d1571293af3cab651701ad800a79135b352b8283d8fb84787e4ecf34bef
- SSDEEP 12288:28/33npArWjfCjFM+wq0wyqHsuP101U6vASOGfFFre9loNGMcUOU3QWj8htv5AlC:28f6afCjuBSHsu2UhowloNLQWozSk
- TLSH T1ED05F11A73E84CF9E927C13D89969512E37278450735D7DF03A0426B2F236E0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_09e671a92fc9888a2125360a606d46ee_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_09e671a92fc9888a2125360a606d46ee_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_09e671a92fc9888a2125360a606d46ee_cobalt-strike_icedid_njrat_vidar
- Size 836KB
- SHA256 c4c3ceb96b02e52cbfed253049cea25f5fa4a27802f1c33b0f8bd99ebce05798
- MD5 09e671a92fc9888a2125360a606d46ee
- SHA1 983edc5761f598370dbf758474e209d8381cbff3
- SHA512 42d37a1121466901b37ed9c0aa279c9be852d8a1a909691f10d5e650c69e19f758d10d1571293af3cab651701ad800a79135b352b8283d8fb84787e4ecf34bef
- SSDEEP 12288:28/33npArWjfCjFM+wq0wyqHsuP101U6vASOGfFFre9loNGMcUOU3QWj8htv5AlC:28f6afCjuBSHsu2UhowloNLQWozSk
- TLSH T1ED05F11A73E84CF9E927C13D89969512E37278450735D7DF03A0426B2F236E0AE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1