General
- Target 2026-10-21_953fe7dacaceaaa70861dd1aa5d0d6f5_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- Sample261022-vaxe2ags5r
- SHA256 71d9beb7a3cc3cabd13122209f2634c43f62f3b2739233f9aea2100ecce7a576
- MD5 953fe7dacaceaaa70861dd1aa5d0d6f5
- SHA1 3a05e8c14faba350f227236aaa88e5f3f08827df
- SHA512 1d287eec8c1ec76f8ffc85bf6c4dee1bcfb3bf944229a100941d67e362806e9460848ae4f15d62debcf71b76c2714f4ce843c058058e77613c4451c6ab160f75
- SSDEEP 24576:FBYGb8a9t3A6nzSpx5SSiVw6uAX8DS52tpz9ZRzbPmSZyo:cI8UA6u5SW6H8DS52tdDpbRZy
- TLSH T1A335E045A7E500F9E1B7E678C9A74A02E77B7C460270DB4F03E881772F676909E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-21_953fe7dacaceaaa70861dd1aa5d0d6f5_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-21_953fe7dacaceaaa70861dd1aa5d0d6f5_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-21_953fe7dacaceaaa70861dd1aa5d0d6f5_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.0MB
- SHA256 71d9beb7a3cc3cabd13122209f2634c43f62f3b2739233f9aea2100ecce7a576
- MD5 953fe7dacaceaaa70861dd1aa5d0d6f5
- SHA1 3a05e8c14faba350f227236aaa88e5f3f08827df
- SHA512 1d287eec8c1ec76f8ffc85bf6c4dee1bcfb3bf944229a100941d67e362806e9460848ae4f15d62debcf71b76c2714f4ce843c058058e77613c4451c6ab160f75
- SSDEEP 24576:FBYGb8a9t3A6nzSpx5SSiVw6uAX8DS52tpz9ZRzbPmSZyo:cI8UA6u5SW6H8DS52tdDpbRZy
- TLSH T1A335E045A7E500F9E1B7E678C9A74A02E77B7C460270DB4F03E881772F676909E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1