General
- Target 2026-10-03_f5b7ac8c40f9f934cdce4989101bd5f5_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.9MB
- Sample261003-3cmbvaz1cs
- SHA256 e6ec68c8ea50c511e83f8a38d4203219a65856b19cdc54f0bbd4a04dd9de342f
- MD5 f5b7ac8c40f9f934cdce4989101bd5f5
- SHA1 25cfe02a6faa88966d054c547a027a2ecf1d9be6
- SHA512 bc6961b58936135479ba721435734930b0675433a469b06d811da11c89c3f1a5f80fdc51dad784f2dd38386eb72016da6e052a977a82c8790b8758e9ae0abea6
- SSDEEP 49152:E6yRWInD4Jc+b01tnAyB63TANQnMED6Te8wTKUWUNBzcobgZbgHKSFFM:xNPbiHs6ZjL0BzpbDKS3
- TLSH T132E57C07B3F941ACF0AAE2B8D73156329EB2BC53CB34A5DF125426151E71AE05B38772
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_f5b7ac8c40f9f934cdce4989101bd5f5_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-03_f5b7ac8c40f9f934cdce4989101bd5f5_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.9MB
- SHA256 e6ec68c8ea50c511e83f8a38d4203219a65856b19cdc54f0bbd4a04dd9de342f
- MD5 f5b7ac8c40f9f934cdce4989101bd5f5
- SHA1 25cfe02a6faa88966d054c547a027a2ecf1d9be6
- SHA512 bc6961b58936135479ba721435734930b0675433a469b06d811da11c89c3f1a5f80fdc51dad784f2dd38386eb72016da6e052a977a82c8790b8758e9ae0abea6
- SSDEEP 49152:E6yRWInD4Jc+b01tnAyB63TANQnMED6Te8wTKUWUNBzcobgZbgHKSFFM:xNPbiHs6ZjL0BzpbDKS3
- TLSH T132E57C07B3F941ACF0AAE2B8D73156329EB2BC53CB34A5DF125426151E71AE05B38772
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory