General
- Target 2026-09-29_557b3de37e57e10eb2f450abc530cdf1_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.6MB
- Sample260930-a5tmeavanh
- SHA256 a0009eb1dc73aa2426af30a64e103ccc58d640894a832d2832fc5d0aea90f48e
- MD5 557b3de37e57e10eb2f450abc530cdf1
- SHA1 75a8cfcefedbc1d157bec6fbb7b29314bc12fb25
- SHA512 2ef6aec6d4adfe6ecfef042d8a362a9ee8146a93f0d6e6c520813c99c2e0345a2efdb645e09b4c2c1f25412e2364c62b457d0edeb0261ad3460b0d61fb3c74a2
- SSDEEP 24576:gBYGb8aQt3A6nzSpB6BY6SgpfknjmmWmkRSDGS1:nI8BA6W6Bd0WtRSDGS
- TLSH T14475D005A7E900B8E1B7E638C9A75902E77B7C0506B0DB8F03E895771F776609E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_557b3de37e57e10eb2f450abc530cdf1_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_557b3de37e57e10eb2f450abc530cdf1_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_557b3de37e57e10eb2f450abc530cdf1_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.6MB
- SHA256 a0009eb1dc73aa2426af30a64e103ccc58d640894a832d2832fc5d0aea90f48e
- MD5 557b3de37e57e10eb2f450abc530cdf1
- SHA1 75a8cfcefedbc1d157bec6fbb7b29314bc12fb25
- SHA512 2ef6aec6d4adfe6ecfef042d8a362a9ee8146a93f0d6e6c520813c99c2e0345a2efdb645e09b4c2c1f25412e2364c62b457d0edeb0261ad3460b0d61fb3c74a2
- SSDEEP 24576:gBYGb8aQt3A6nzSpB6BY6SgpfknjmmWmkRSDGS1:nI8BA6W6Bd0WtRSDGS
- TLSH T14475D005A7E900B8E1B7E638C9A75902E77B7C0506B0DB8F03E895771F776609E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1