General
- Target 2026-10-01_7ab336d2c500776ba85b0bb7fc32b826_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- Sample261003-yttp2axyct
- SHA256 334569a02e10e414a75e2323aa7d245615a95d908340e14fb22c2ec6ca98d0f5
- MD5 7ab336d2c500776ba85b0bb7fc32b826
- SHA1 3e81b9a672b0cc79f86312e2d65345e1993aa7ed
- SHA512 b738b58c677c9de39531abf5644743cc3c1863d7090e39e1431e00b8c581365de4cb61d64b2e382e9c90e8eae5cf692d1c7fa6c9c6601b40b554cc8adcbe6792
- SSDEEP 24576:/WT6LD1P0mHtBXY0I0QfwSRdfrfCWC9A:/3LDdkXLwSRdfbTC9
- TLSH T17705F15A73E90CF9E927C17CC9428A06E772B8450735DBDF07A0426B6F233A15E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_7ab336d2c500776ba85b0bb7fc32b826_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_7ab336d2c500776ba85b0bb7fc32b826_cobalt-strike_icedid_njrat_vidar
- Size 840KB
- SHA256 334569a02e10e414a75e2323aa7d245615a95d908340e14fb22c2ec6ca98d0f5
- MD5 7ab336d2c500776ba85b0bb7fc32b826
- SHA1 3e81b9a672b0cc79f86312e2d65345e1993aa7ed
- SHA512 b738b58c677c9de39531abf5644743cc3c1863d7090e39e1431e00b8c581365de4cb61d64b2e382e9c90e8eae5cf692d1c7fa6c9c6601b40b554cc8adcbe6792
- SSDEEP 24576:/WT6LD1P0mHtBXY0I0QfwSRdfrfCWC9A:/3LDdkXLwSRdfbTC9
- TLSH T17705F15A73E90CF9E927C17CC9428A06E772B8450735DBDF07A0426B6F233A15E39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1