General
- Target 2026-06-01_1e2bae1c510e55f84cd203993fca6e02_cobalt-strike_icedid_mespinoza_njrat_ryuk
- Size 594KB
- Sample260601-bv4v3aaz71
- SHA256 df745b17f1c941cba987935edbb196550a9037fc4f7083b05eff4b1e769b2927
- MD5 1e2bae1c510e55f84cd203993fca6e02
- SHA1 eab7b220ca73cb18dd072d250f36241c743d8e1b
- SHA512 37032fb844247dba92b44f7dcac4b99c4c494a9248252dedec635b93813bc8aaea3a06014a95887f654a834b21c34ecb916e8557c8b472b1d11ebdc793845df8
- SSDEEP 12288:9ls94ecu+zLcw84Xj4mELQ2D8dndFKV5A:6cu+3vjj4LQ2D8dndFKzA
- TLSH T18DD4AE40B3D845E9E06AC5348E578646DA7378960F24F6CF02E492BD2F376E95F3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_1e2bae1c510e55f84cd203993fca6e02_cobalt-strike_icedid_mespinoza_njrat_ryuk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_1e2bae1c510e55f84cd203993fca6e02_cobalt-strike_icedid_mespinoza_njrat_ryuk.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_1e2bae1c510e55f84cd203993fca6e02_cobalt-strike_icedid_mespinoza_njrat_ryuk
- Size 594KB
- SHA256 df745b17f1c941cba987935edbb196550a9037fc4f7083b05eff4b1e769b2927
- MD5 1e2bae1c510e55f84cd203993fca6e02
- SHA1 eab7b220ca73cb18dd072d250f36241c743d8e1b
- SHA512 37032fb844247dba92b44f7dcac4b99c4c494a9248252dedec635b93813bc8aaea3a06014a95887f654a834b21c34ecb916e8557c8b472b1d11ebdc793845df8
- SSDEEP 12288:9ls94ecu+zLcw84Xj4mELQ2D8dndFKV5A:6cu+3vjj4LQ2D8dndFKzA
- TLSH T18DD4AE40B3D845E9E06AC5348E578646DA7378960F24F6CF02E492BD2F376E95F3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.