General
- Target 2026-09-13_4b897f45cdb1dfd4421935943e0fce39_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260913-sz7aes1xes
- SHA256 466d51c84731be9e2551a94f3d1a6748a1484fef675c303dda1aa1b4d3ca932b
- MD5 4b897f45cdb1dfd4421935943e0fce39
- SHA1 5bff91a5d27ff65b866759251abcee6d3dc4d131
- SHA512 463529b4db66c471aad5cd97be718127e7bc0d57a3af9e552617d2a7e163900002d0a1415f6c1cc88a1a680f3c7f6dae5a6144a98030e3dd9ac4163688458490
- SSDEEP 49152:2Hs5/SaWEzVHWhcbK2pTETMcwKZJHZyi:2HmC2R8ZJ5yi
- TLSH T13185BF07B69600FCD06DC1B8CB169132EA71B8850F71BAEF1390A3692E76AE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_4b897f45cdb1dfd4421935943e0fce39_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_4b897f45cdb1dfd4421935943e0fce39_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 466d51c84731be9e2551a94f3d1a6748a1484fef675c303dda1aa1b4d3ca932b
- MD5 4b897f45cdb1dfd4421935943e0fce39
- SHA1 5bff91a5d27ff65b866759251abcee6d3dc4d131
- SHA512 463529b4db66c471aad5cd97be718127e7bc0d57a3af9e552617d2a7e163900002d0a1415f6c1cc88a1a680f3c7f6dae5a6144a98030e3dd9ac4163688458490
- SSDEEP 49152:2Hs5/SaWEzVHWhcbK2pTETMcwKZJHZyi:2HmC2R8ZJ5yi
- TLSH T13185BF07B69600FCD06DC1B8CB169132EA71B8850F71BAEF1390A3692E76AE45F3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1