General
- Target 2026-09-13_8b7fe0d7606c4580d3a36b5e88e6c2d8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260913-p2zftabd44
- SHA256 ef8412ff6b681888929ed78cad25deb2f1e3810da8181a944edb1b430bc5f8d0
- MD5 8b7fe0d7606c4580d3a36b5e88e6c2d8
- SHA1 0029ad32ef2d4fcfd5af6452eed5d6e65e8cf818
- SHA512 ed39258767412b5ba4871e4b989e9fb58e1cff24737126e3d12d665a659e831862ce1a1f4e5cd9489edb1d14739951a1def650bc780262926d99b6566fc491d5
- SSDEEP 24576:rVT0AYyRE9Wx/tEX6PoC0jIMuU1XZZdPVTdBdf6efpGHa/9u:r10AYDWxyXGohjIM31p7tTdvySga/9
- TLSH T1C175BE1AB25518EEC2A5C074CE16D531A722BC4E0BF259FB3581F2D92E36AD07F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_8b7fe0d7606c4580d3a36b5e88e6c2d8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_8b7fe0d7606c4580d3a36b5e88e6c2d8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 ef8412ff6b681888929ed78cad25deb2f1e3810da8181a944edb1b430bc5f8d0
- MD5 8b7fe0d7606c4580d3a36b5e88e6c2d8
- SHA1 0029ad32ef2d4fcfd5af6452eed5d6e65e8cf818
- SHA512 ed39258767412b5ba4871e4b989e9fb58e1cff24737126e3d12d665a659e831862ce1a1f4e5cd9489edb1d14739951a1def650bc780262926d99b6566fc491d5
- SSDEEP 24576:rVT0AYyRE9Wx/tEX6PoC0jIMuU1XZZdPVTdBdf6efpGHa/9u:r10AYDWxyXGohjIM31p7tTdvySga/9
- TLSH T1C175BE1AB25518EEC2A5C074CE16D531A722BC4E0BF259FB3581F2D92E36AD07F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1