General
- Target 2026-06-26_9239127745c100e27acb96cc81c341f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260629-raadqagx7n
- SHA256 c270857cacb862099ceb036da7059c078af5cf8cb4459cc190459f4ac483d151
- MD5 9239127745c100e27acb96cc81c341f6
- SHA1 b5d81d7a9d9994c80a8c5e77ee6c396033c30a2c
- SHA512 23acd7f7e8aad3bf0f356b32e971fcf177e1d3c7d57feff24a6af1ecb11902efa3dc1ba602ea288ec2d40660e58bcfca794f632738a83153a4674cf244601bd7
- SSDEEP 6144:tn95+7Ds99Wm1wZMh3DVjvXxx5rAJ7olgtlhnlypjxJ2BfmntD:R9s7Ds99WmwKpBby24lhnSjrm+tD
- TLSH T10454AE69B7E00DF9ED67C27CC9F28515EA3238650360EADF429482661F273C46E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_9239127745c100e27acb96cc81c341f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_9239127745c100e27acb96cc81c341f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_9239127745c100e27acb96cc81c341f6_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 c270857cacb862099ceb036da7059c078af5cf8cb4459cc190459f4ac483d151
- MD5 9239127745c100e27acb96cc81c341f6
- SHA1 b5d81d7a9d9994c80a8c5e77ee6c396033c30a2c
- SHA512 23acd7f7e8aad3bf0f356b32e971fcf177e1d3c7d57feff24a6af1ecb11902efa3dc1ba602ea288ec2d40660e58bcfca794f632738a83153a4674cf244601bd7
- SSDEEP 6144:tn95+7Ds99Wm1wZMh3DVjvXxx5rAJ7olgtlhnlypjxJ2BfmntD:R9s7Ds99WmwKpBby24lhnSjrm+tD
- TLSH T10454AE69B7E00DF9ED67C27CC9F28515EA3238650360EADF429482661F273C46E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.