General
- Target 2026-05-11_871f80cdba99efa79827ce7ca05c4404_cobalt-strike_hijackloader_icedid_njrat
- Size 540KB
- Sample260511-ejwl4aaz9z
- SHA256 a29599f7b1fb0d0d9722ddc0c3d7ea5bf61407626d1c2214e051a42b7c63a6fb
- MD5 871f80cdba99efa79827ce7ca05c4404
- SHA1 e4c191aeb5f94d8052a0cbdfb3749eccf5d0e3cd
- SHA512 67c3aab016c06f4f803822fef9f915396ef366b4e3748952ce054ba84289952d380de24f7d38a733a02e96ca297d41da8a2ee579f90e9193c5dc6420801c292a
- SSDEEP 12288:gAxHSxKs9GJeyk9VXxS6kACsgqbvNxvCXSs7/8:NFTey4xS6kACsgAV20
- TLSH T1C8C46C90F3E414E4F1B39A35CD764512DA767C9A5B21CA8F03A8265A1F33AD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_871f80cdba99efa79827ce7ca05c4404_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_871f80cdba99efa79827ce7ca05c4404_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_871f80cdba99efa79827ce7ca05c4404_cobalt-strike_hijackloader_icedid_njrat
- Size 540KB
- SHA256 a29599f7b1fb0d0d9722ddc0c3d7ea5bf61407626d1c2214e051a42b7c63a6fb
- MD5 871f80cdba99efa79827ce7ca05c4404
- SHA1 e4c191aeb5f94d8052a0cbdfb3749eccf5d0e3cd
- SHA512 67c3aab016c06f4f803822fef9f915396ef366b4e3748952ce054ba84289952d380de24f7d38a733a02e96ca297d41da8a2ee579f90e9193c5dc6420801c292a
- SSDEEP 12288:gAxHSxKs9GJeyk9VXxS6kACsgqbvNxvCXSs7/8:NFTey4xS6kACsgAV20
- TLSH T1C8C46C90F3E414E4F1B39A35CD764512DA767C9A5B21CA8F03A8265A1F33AD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.