General
- Target 2026-05-17_9f89256564294d87c66944c39f99e899_cobalt-strike_icedid_njrat
- Size 455KB
- Sample260517-mmcmdsez7x
- SHA256 d0bcbfc51eb4a5c5186e8cfe7d30ac0430da2449b3a165d19aad6ef57a8322d2
- MD5 9f89256564294d87c66944c39f99e899
- SHA1 75a66a5e7a2255ade8e561fd633380de12d5b36a
- SHA512 954f6328888345bb7e67bdfa976b0c0125ba02ef1d4ea9ebadd4f12e76d478a2e51fe6f159fcfe85575a7b855e15f05020b8ac0fc8ca7a3304999385b78cae03
- SSDEEP 6144:5VAYKu72Bs9HTAlhDgBJEZJDdOHp9hmXNRBD1ixdqb8K3HNxv:5VAP62Bs9zshDg7EZJq9M51izqbvNxv
- TLSH T197A44A90F3E414E8F0B79A358D764511DA767C9A1B21DE8F02A8265A1F33BD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-17_9f89256564294d87c66944c39f99e899_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_9f89256564294d87c66944c39f99e899_cobalt-strike_icedid_njrat.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_9f89256564294d87c66944c39f99e899_cobalt-strike_icedid_njrat
- Size 455KB
- SHA256 d0bcbfc51eb4a5c5186e8cfe7d30ac0430da2449b3a165d19aad6ef57a8322d2
- MD5 9f89256564294d87c66944c39f99e899
- SHA1 75a66a5e7a2255ade8e561fd633380de12d5b36a
- SHA512 954f6328888345bb7e67bdfa976b0c0125ba02ef1d4ea9ebadd4f12e76d478a2e51fe6f159fcfe85575a7b855e15f05020b8ac0fc8ca7a3304999385b78cae03
- SSDEEP 6144:5VAYKu72Bs9HTAlhDgBJEZJDdOHp9hmXNRBD1ixdqb8K3HNxv:5VAP62Bs9zshDg7EZJq9M51izqbvNxv
- TLSH T197A44A90F3E414E8F0B79A358D764511DA767C9A1B21DE8F02A8265A1F33BD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.