General
- Target 2026-06-30_67d7e595ddb18ea6fb86e7da42a2b6e8_cobalt-strike_icedid_njrat
- Size 455KB
- Sample260701-e7wl1agt6t
- SHA256 a7d25fa958e8663f63f56284c79fa5282cab72d4782956ca4e559be266cdb540
- MD5 67d7e595ddb18ea6fb86e7da42a2b6e8
- SHA1 13fe9d50497453438fd765c454f496f0cfc46a1a
- SHA512 7ec266869f2610316314350228667e38c249ae3bcfc8033eeac60ae9ffec4aba21424afbe667d5e08fdd87e215307656dc2a9da4da94303167239d455a64639f
- SSDEEP 6144:/g+Ydist9s9sT828qUihwCN0hRjHpdQ2hdTsDQwMIQb8K+HN9v:/g+I9t9s9UCqUiiCN0VdT4QwBQbqN9v
- TLSH T18BA44A90F3E414E8F1B79A358D764511DAB67C5A1B31DE8F02A8261A1F33AD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_67d7e595ddb18ea6fb86e7da42a2b6e8_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_67d7e595ddb18ea6fb86e7da42a2b6e8_cobalt-strike_icedid_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_67d7e595ddb18ea6fb86e7da42a2b6e8_cobalt-strike_icedid_njrat
- Size 455KB
- SHA256 a7d25fa958e8663f63f56284c79fa5282cab72d4782956ca4e559be266cdb540
- MD5 67d7e595ddb18ea6fb86e7da42a2b6e8
- SHA1 13fe9d50497453438fd765c454f496f0cfc46a1a
- SHA512 7ec266869f2610316314350228667e38c249ae3bcfc8033eeac60ae9ffec4aba21424afbe667d5e08fdd87e215307656dc2a9da4da94303167239d455a64639f
- SSDEEP 6144:/g+Ydist9s9sT828qUihwCN0hRjHpdQ2hdTsDQwMIQb8K+HN9v:/g+I9t9s9UCqUiiCN0VdT4QwBQbqN9v
- TLSH T18BA44A90F3E414E8F1B79A358D764511DAB67C5A1B31DE8F02A8261A1F33AD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.