General
- Target 2026-10-02_fc08aecc550281fed88d509e50628922_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- Sample261002-1menmstenc
- SHA256 d0a5c1070c992710d499ec0bc55bf6669ee8748bff5a87d16d9c6b4ecfd20eb9
- MD5 fc08aecc550281fed88d509e50628922
- SHA1 76145c7fa34a0dec5701c7c61f617f7981ee426e
- SHA512 578fdce6b087cc23a0c80b22c86e07b0f7227832c9352543b0e1ffb6fd7c86d20425863f17d9293d58cb4b36b639e231490637c3e9375d296e646936c02648fb
- SSDEEP 12288:mA/H3npArW56hG9DRQfgsMW2BhuPzPmLHIvZZGbScKG+kR7RMKgRKAauFoswgCr3:mAf6Y60O47WMUTWHIBQS7c764uFo0CT
- TLSH T14105F11A37D85CF9E927C27D8D864642E73278451771DADF07A0027B2F236E0AE39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_fc08aecc550281fed88d509e50628922_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-02_fc08aecc550281fed88d509e50628922_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- SHA256 d0a5c1070c992710d499ec0bc55bf6669ee8748bff5a87d16d9c6b4ecfd20eb9
- MD5 fc08aecc550281fed88d509e50628922
- SHA1 76145c7fa34a0dec5701c7c61f617f7981ee426e
- SHA512 578fdce6b087cc23a0c80b22c86e07b0f7227832c9352543b0e1ffb6fd7c86d20425863f17d9293d58cb4b36b639e231490637c3e9375d296e646936c02648fb
- SSDEEP 12288:mA/H3npArW56hG9DRQfgsMW2BhuPzPmLHIvZZGbScKG+kR7RMKgRKAauFoswgCr3:mAf6Y60O47WMUTWHIBQS7c764uFo0CT
- TLSH T14105F11A37D85CF9E927C27D8D864642E73278451771DADF07A0027B2F236E0AE39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1