General
- Target 2026-07-06_01e319fb792fc3702f91b18228788e40_cobalt-strike_icedid_njrat_vidar
- Size 837KB
- Sample260706-2ttltaas9q
- SHA256 faf98c97017a92d7dcd6b1cc009e44b7e54c261ebf47a94b81b000247b6fd70a
- MD5 01e319fb792fc3702f91b18228788e40
- SHA1 b87b0b625d5ee18d5c3692acf248ba2ba83c3a9b
- SHA512 c774d746594184e03ec702112ea9097c2fa59c187cf396681ebd0806866fe0fe9861e54a33371f219c8d32b681a8c0711f23c8bac70a52814c9d735f13c9a6a0
- SSDEEP 12288:GRnQi8Cxo1GCK0JmVdfRMc1nh1CZ9CvhDYbfLrVBNJACy1CGlKbqzE7DNibD7:4nDZoPqVh1a9iEVBNJACyMGYbe/
- TLSH T189058CACF69606F0C9778639C9A25E07E376745803A495EF1394026E6F233D1CA3EF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_01e319fb792fc3702f91b18228788e40_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_01e319fb792fc3702f91b18228788e40_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_01e319fb792fc3702f91b18228788e40_cobalt-strike_icedid_njrat_vidar
- Size 837KB
- SHA256 faf98c97017a92d7dcd6b1cc009e44b7e54c261ebf47a94b81b000247b6fd70a
- MD5 01e319fb792fc3702f91b18228788e40
- SHA1 b87b0b625d5ee18d5c3692acf248ba2ba83c3a9b
- SHA512 c774d746594184e03ec702112ea9097c2fa59c187cf396681ebd0806866fe0fe9861e54a33371f219c8d32b681a8c0711f23c8bac70a52814c9d735f13c9a6a0
- SSDEEP 12288:GRnQi8Cxo1GCK0JmVdfRMc1nh1CZ9CvhDYbfLrVBNJACy1CGlKbqzE7DNibD7:4nDZoPqVh1a9iEVBNJACyMGYbe/
- TLSH T189058CACF69606F0C9778639C9A25E07E376745803A495EF1394026E6F233D1CA3EF52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.