General
- Target 2026-05-29_85fc659cf7a3c070d982b800ac5a7d7e_cobalt-strike_hijackloader_icedid_njrat
- Size 540KB
- Sample260529-eke1qscw6x
- SHA256 ec49202425096af7be4a489bd526f8de80d2c312c848733919be476e9fff45fd
- MD5 85fc659cf7a3c070d982b800ac5a7d7e
- SHA1 402a73b483f070a1f657e5a6d75289e9c17380cc
- SHA512 935eabdc1aa69edff30e324c3b2560b5619ffc8b587da2ef8f35026e94bf292cf9d60e2243cca65662825b277a46605397999bfc9828083177e1fa5028dc958b
- SSDEEP 12288:yUW/9kts921aolNqdDPEAvbJXqbvNxvYUqbwy/e:v08aoaDPEAvbJXAjSwr
- TLSH T109C47C90F3E414E5F0B78A35CD764512DAB67C9A1B61CA8F02A8661A1F337D18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_85fc659cf7a3c070d982b800ac5a7d7e_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_85fc659cf7a3c070d982b800ac5a7d7e_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_85fc659cf7a3c070d982b800ac5a7d7e_cobalt-strike_hijackloader_icedid_njrat
- Size 540KB
- SHA256 ec49202425096af7be4a489bd526f8de80d2c312c848733919be476e9fff45fd
- MD5 85fc659cf7a3c070d982b800ac5a7d7e
- SHA1 402a73b483f070a1f657e5a6d75289e9c17380cc
- SHA512 935eabdc1aa69edff30e324c3b2560b5619ffc8b587da2ef8f35026e94bf292cf9d60e2243cca65662825b277a46605397999bfc9828083177e1fa5028dc958b
- SSDEEP 12288:yUW/9kts921aolNqdDPEAvbJXqbvNxvYUqbwy/e:v08aoaDPEAvbJXAjSwr
- TLSH T109C47C90F3E414E5F0B78A35CD764512DAB67C9A1B61CA8F02A8661A1F337D18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.