General
- Target 2026-10-11_648f29ad0fed30045e92b3cab7669166_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.9MB
- Sample261012-yqs94aew21
- SHA256 ae731ca383823c596641c1263a000ad23541b636ae2e1d3612999ddbfa9fbf02
- MD5 648f29ad0fed30045e92b3cab7669166
- SHA1 080d2485d4b405db8c243491bae0e63916bac792
- SHA512 aefceb58423aca0b26659dc650118e03726a19853fae2deed7bdf48fa746a0e33f3a2c52d0a3f3c2ca03b435db255a13de737c55bf3fd47987d6506fb4800188
- SSDEEP 49152:SVaYNZm7Z8wDFfaa2KyS9Gl0mbPdZoh0qnB7g7Deldn5icp6PvCe30jaNf1TWbdz:tN/faaNCpqB7vlBkejU023W
- TLSH T1C7D5DF43F69505D8E0ABC174874A9532EAA2BC496F24BADF0790B21D2E77EE05F3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-11_648f29ad0fed30045e92b3cab7669166_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_648f29ad0fed30045e92b3cab7669166_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 2.9MB
- SHA256 ae731ca383823c596641c1263a000ad23541b636ae2e1d3612999ddbfa9fbf02
- MD5 648f29ad0fed30045e92b3cab7669166
- SHA1 080d2485d4b405db8c243491bae0e63916bac792
- SHA512 aefceb58423aca0b26659dc650118e03726a19853fae2deed7bdf48fa746a0e33f3a2c52d0a3f3c2ca03b435db255a13de737c55bf3fd47987d6506fb4800188
- SSDEEP 49152:SVaYNZm7Z8wDFfaa2KyS9Gl0mbPdZoh0qnB7g7Deldn5icp6PvCe30jaNf1TWbdz:tN/faaNCpqB7vlBkejU023W
- TLSH T1C7D5DF43F69505D8E0ABC174874A9532EAA2BC496F24BADF0790B21D2E77EE05F3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1