General
- Target 2026-06-30_040b5f2771edb5bad05747882e846f17_cobalt-strike_hijackloader_icedid_njrat_stealc_vidar
- Size 4.5MB
- Sample260701-hd7zqaav2z
- SHA256 d5427b3de4f9cf8868cc85d114063d1567fde51b02a0df9f5085543f4a125797
- MD5 040b5f2771edb5bad05747882e846f17
- SHA1 a72266c393367d0bafae74d38db39b52ae863a05
- SHA512 15f705e1c3c0cd3e4a71f4ed6caafc7677a0a8d8b374f712628685be4d4e46a2aff75e78c84f8512a10c530cf6b91807b7bcc41295dde922563d805906bcd2ca
- SSDEEP 98304:3wgWaVOBfKRbQT41wsbqrA0Ax6BYIuU+LzmTOYOM2nL7lETr3dwBkR17Vp:Ada7BQ1Gqc0Ax6BN4zwl2nvlUNbR1
- TLSH T1D726121BF7118ABCC097C67488A387A3D671BD980B71978B22D4735F1E73A606E39709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_040b5f2771edb5bad05747882e846f17_cobalt-strike_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_040b5f2771edb5bad05747882e846f17_cobalt-strike_hijackloader_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_040b5f2771edb5bad05747882e846f17_cobalt-strike_hijackloader_icedid_njrat_stealc_vidar
- Size 4.5MB
- SHA256 d5427b3de4f9cf8868cc85d114063d1567fde51b02a0df9f5085543f4a125797
- MD5 040b5f2771edb5bad05747882e846f17
- SHA1 a72266c393367d0bafae74d38db39b52ae863a05
- SHA512 15f705e1c3c0cd3e4a71f4ed6caafc7677a0a8d8b374f712628685be4d4e46a2aff75e78c84f8512a10c530cf6b91807b7bcc41295dde922563d805906bcd2ca
- SSDEEP 98304:3wgWaVOBfKRbQT41wsbqrA0Ax6BYIuU+LzmTOYOM2nL7lETr3dwBkR17Vp:Ada7BQ1Gqc0Ax6BN4zwl2nvlUNbR1
- TLSH T1D726121BF7118ABCC097C67488A387A3D671BD980B71978B22D4735F1E73A606E39709
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.