General
- Target 2026-10-22_6674632e5ce5f68b3ca93b122c42ab3a_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.5MB
- Sample261024-mlfyesht21
- SHA256 2b720a4fc0c15e736cb1ac363806c178234cf625ecff3e9e4927dafd5987f8e1
- MD5 6674632e5ce5f68b3ca93b122c42ab3a
- SHA1 96f73c9dff93ebf3101c7cf1b194bf4a968641cd
- SHA512 d5296a2080135978c31809a077d66ea36e495cb5cfe9a7b1be5e7938d52f662aa8c87870070b0041112a47373c6db846767612a46d85de09f84e5833022d9375
- SSDEEP 12288:SK0cfd1MaaZeQ8fcp+Zoce4uhiaKWC83BfFD4BzZYud0Rcz87rKCIc4CBm2Q1ekZ:JileQ80pOd9ukW1BftQ7mZSCIP52R3S
- TLSH T1FE75BE09639841E9D16781388953C935E6B27C5507309ADF23D8BF7B3E73AD09E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_6674632e5ce5f68b3ca93b122c42ab3a_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_6674632e5ce5f68b3ca93b122c42ab3a_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6674632e5ce5f68b3ca93b122c42ab3a_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.5MB
- SHA256 2b720a4fc0c15e736cb1ac363806c178234cf625ecff3e9e4927dafd5987f8e1
- MD5 6674632e5ce5f68b3ca93b122c42ab3a
- SHA1 96f73c9dff93ebf3101c7cf1b194bf4a968641cd
- SHA512 d5296a2080135978c31809a077d66ea36e495cb5cfe9a7b1be5e7938d52f662aa8c87870070b0041112a47373c6db846767612a46d85de09f84e5833022d9375
- SSDEEP 12288:SK0cfd1MaaZeQ8fcp+Zoce4uhiaKWC83BfFD4BzZYud0Rcz87rKCIc4CBm2Q1ekZ:JileQ80pOd9ukW1BftQ7mZSCIP52R3S
- TLSH T1FE75BE09639841E9D16781388953C935E6B27C5507309ADF23D8BF7B3E73AD09E3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1