General
- Target 2026-09-12_446f156b5ccfca706abbafa1e7b2b0cb_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- Sample260913-c7w7eseb25
- SHA256 0595d8e38905e4ed16dc3ebe194d4d335bb5f12983802e1c10078b96b776e3d2
- MD5 446f156b5ccfca706abbafa1e7b2b0cb
- SHA1 83f035d5097cb7350a75a36a4618c05591037403
- SHA512 c1a33af647d0f11a45a3b94708fea59ad90d1d6fcbb77d5f8d30569ec9fd18326b11d9b0e8d63686ea47c844d63abd2b59abd65af7206bc2544b10b00ce8c161
- SSDEEP 24576:sBYGb8aht3A6nzSpNl3OSq2PEIdADeU9jz:DI8YA6CUSqHIdADeU
- TLSH T17635D00567E500F9E1B7E674C9A24A02E77B7C0616B0DB4F03E891772F776909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_446f156b5ccfca706abbafa1e7b2b0cb_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_446f156b5ccfca706abbafa1e7b2b0cb_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_446f156b5ccfca706abbafa1e7b2b0cb_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- SHA256 0595d8e38905e4ed16dc3ebe194d4d335bb5f12983802e1c10078b96b776e3d2
- MD5 446f156b5ccfca706abbafa1e7b2b0cb
- SHA1 83f035d5097cb7350a75a36a4618c05591037403
- SHA512 c1a33af647d0f11a45a3b94708fea59ad90d1d6fcbb77d5f8d30569ec9fd18326b11d9b0e8d63686ea47c844d63abd2b59abd65af7206bc2544b10b00ce8c161
- SSDEEP 24576:sBYGb8aht3A6nzSpNl3OSq2PEIdADeU9jz:DI8YA6CUSqHIdADeU
- TLSH T17635D00567E500F9E1B7E674C9A24A02E77B7C0616B0DB4F03E891772F776909E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1