General
- Target 2026-05-16_e2ed0fcac1da5d6e8adc527a350c33d2_cobalt-strike_hijackloader_icedid_njrat
- Size 540KB
- Sample260516-mf12eacw8s
- SHA256 f2857fe6a28257531a0c638c157d5fcac2ceb07e0ef21918fb8158a7774a649f
- MD5 e2ed0fcac1da5d6e8adc527a350c33d2
- SHA1 aa06c299e1e208f6fe8578636a00a8454f5de87d
- SHA512 3a24732c1304d2334c2a5e68875e67ff9aaa10ef04e31ceb1f7c90f97c5fe1cf1e946d45cf0ee3ef51e84e97f6ccadc52c8245224e48e4ec7167e7ef76f4887c
- SSDEEP 12288:RLzBXKEs9WViSIeB1je/XInTxqbvNxv0b8TG1IE:9t7iSRje/XInTxAM1v
- TLSH T101C47B90F3E414E8F0B78A39CD768511DA767C9A1B60DA8F12A4661A1F337D18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-16_e2ed0fcac1da5d6e8adc527a350c33d2_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_e2ed0fcac1da5d6e8adc527a350c33d2_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_e2ed0fcac1da5d6e8adc527a350c33d2_cobalt-strike_hijackloader_icedid_njrat
- Size 540KB
- SHA256 f2857fe6a28257531a0c638c157d5fcac2ceb07e0ef21918fb8158a7774a649f
- MD5 e2ed0fcac1da5d6e8adc527a350c33d2
- SHA1 aa06c299e1e208f6fe8578636a00a8454f5de87d
- SHA512 3a24732c1304d2334c2a5e68875e67ff9aaa10ef04e31ceb1f7c90f97c5fe1cf1e946d45cf0ee3ef51e84e97f6ccadc52c8245224e48e4ec7167e7ef76f4887c
- SSDEEP 12288:RLzBXKEs9WViSIeB1je/XInTxqbvNxv0b8TG1IE:9t7iSRje/XInTxAM1v
- TLSH T101C47B90F3E414E8F0B78A39CD768511DA767C9A1B60DA8F12A4661A1F337D18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.