General
- Target 2026-07-02_8cbc4061029bd593c70b4c83da782dd5_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- Sample260702-ne8kjagy6x
- SHA256 80bab57b461f1a16eaa34f6a22203ce0cb654b5dabe9f155d0f897bf1c7dda6b
- MD5 8cbc4061029bd593c70b4c83da782dd5
- SHA1 6eb3094ddf95c96ab811f44dbee35b6a9956e81e
- SHA512 0a453f9780173ce0b2312034e2a3d028457f31f7e4ee34588fbd7d3b149b2417422abcb5b52cc3e229f94271775f0a36500ce6edd241703ce2e3d357525e8a76
- SSDEEP 12288:3b8Mocpg+NsIY8Nh/9s9bybt0YrAhezSpe0fJqFCuZq:3Lpd1hhbt0YrnzSpevFCcq
- TLSH T156C48E55A7E400B9E1B7E678C9A35902E77B7C0A0670DB8F03E8C1772F676509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_8cbc4061029bd593c70b4c83da782dd5_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_8cbc4061029bd593c70b4c83da782dd5_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_8cbc4061029bd593c70b4c83da782dd5_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- SHA256 80bab57b461f1a16eaa34f6a22203ce0cb654b5dabe9f155d0f897bf1c7dda6b
- MD5 8cbc4061029bd593c70b4c83da782dd5
- SHA1 6eb3094ddf95c96ab811f44dbee35b6a9956e81e
- SHA512 0a453f9780173ce0b2312034e2a3d028457f31f7e4ee34588fbd7d3b149b2417422abcb5b52cc3e229f94271775f0a36500ce6edd241703ce2e3d357525e8a76
- SSDEEP 12288:3b8Mocpg+NsIY8Nh/9s9bybt0YrAhezSpe0fJqFCuZq:3Lpd1hhbt0YrnzSpevFCcq
- TLSH T156C48E55A7E400B9E1B7E678C9A35902E77B7C0A0670DB8F03E8C1772F676509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.