General
- Target 2026-09-16_ebe958b940e7dd1defbda07cc9308f2b_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- Sample260916-s8k4jsbe79
- SHA256 4911d55d569975e7ba64b1b6075668ed3875ba67b8bd54d85f4cd49cd313204c
- MD5 ebe958b940e7dd1defbda07cc9308f2b
- SHA1 6a6e8314f4fc00ae641b8f5824c146eaa7212fb4
- SHA512 e097870b6a9517b919fcb40e2b036e775c3ce577bf54057d93dcfb0545a008c72cebbe14d944560640250c9a47ebe428bdd0ad20769628f133424c43b0167efa
- SSDEEP 24576:tBYGb8akt3A6nzSpvyxknw4FYnshx8OfVe247:UI8FA6Px4x8EVep
- TLSH T1E995D019A7E900F8E1B7E674C9A35A02E77B7C054670D74F03E8917B2F636509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-16_ebe958b940e7dd1defbda07cc9308f2b_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-16_ebe958b940e7dd1defbda07cc9308f2b_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_ebe958b940e7dd1defbda07cc9308f2b_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.8MB
- SHA256 4911d55d569975e7ba64b1b6075668ed3875ba67b8bd54d85f4cd49cd313204c
- MD5 ebe958b940e7dd1defbda07cc9308f2b
- SHA1 6a6e8314f4fc00ae641b8f5824c146eaa7212fb4
- SHA512 e097870b6a9517b919fcb40e2b036e775c3ce577bf54057d93dcfb0545a008c72cebbe14d944560640250c9a47ebe428bdd0ad20769628f133424c43b0167efa
- SSDEEP 24576:tBYGb8akt3A6nzSpvyxknw4FYnshx8OfVe247:UI8FA6Px4x8EVep
- TLSH T1E995D019A7E900F8E1B7E674C9A35A02E77B7C054670D74F03E8917B2F636509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1