General
- Target 2026-11-12_416a69593a0aaa183785b2db47774ca9_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- Sample261113-e53yasf19p
- SHA256 2714e1f2ceb824d4eae141e3cc998e5e4ec2ed447dbb4d862445b6d830aa7d84
- MD5 416a69593a0aaa183785b2db47774ca9
- SHA1 ccadfe7d070c66185753a7a7df9eca8595631e0f
- SHA512 73ccf1a6001843b2a2c9d8bd55ca4a18242ba9818e4eeee857b7689f8e8c08ad49505de5c55fcac50540cf16bbe04a0d3ca38c5e130a18737cf459c01db9b7c8
- SSDEEP 24576:2Nd6a2n47o03BgoknaFgX5s4MJxq7s8GSd6nm1ww:2jTo0hAaFMsNKQhSUnFw
- TLSH T12975E145EBE504F8E1B7AA74C8F20501EA777C8A5770CA5F23A8461A1F737909D3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-12_416a69593a0aaa183785b2db47774ca9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-12_416a69593a0aaa183785b2db47774ca9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-12_416a69593a0aaa183785b2db47774ca9_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- SHA256 2714e1f2ceb824d4eae141e3cc998e5e4ec2ed447dbb4d862445b6d830aa7d84
- MD5 416a69593a0aaa183785b2db47774ca9
- SHA1 ccadfe7d070c66185753a7a7df9eca8595631e0f
- SHA512 73ccf1a6001843b2a2c9d8bd55ca4a18242ba9818e4eeee857b7689f8e8c08ad49505de5c55fcac50540cf16bbe04a0d3ca38c5e130a18737cf459c01db9b7c8
- SSDEEP 24576:2Nd6a2n47o03BgoknaFgX5s4MJxq7s8GSd6nm1ww:2jTo0hAaFMsNKQhSUnFw
- TLSH T12975E145EBE504F8E1B7AA74C8F20501EA777C8A5770CA5F23A8461A1F737909D3DB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1