General
- Target 2026-07-07_ce08b48c1716a868978673d1b00c909f_cobalt-strike_icedid_njrat
- Size 853KB
- Sample260707-hvcvxag16p
- SHA256 b0f93582d491e1f67942672f745a6e127b4d097cf514cfb634684c3d9d17bc4b
- MD5 ce08b48c1716a868978673d1b00c909f
- SHA1 82b54df73e3bdbead7775876f228df980fae3b90
- SHA512 064ba1d34311ffdac25e042588073bb5bbdc78ed5a3f79b7536e959b6958ac72d36094c8d7464757d7a669c7f275d222891624ec739f619555fcef22017ea23c
- SSDEEP 24576:G/di1czs1CGRLLQH/7KrGKPVi+57zpBSh68/:G/diizs1TRLYerGKPVi+57zpBSh68
- TLSH T1FA051B19F6FA10E1E176C038D942662AFD713496433896EB53818A9A7F30BF8DE3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_ce08b48c1716a868978673d1b00c909f_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_ce08b48c1716a868978673d1b00c909f_cobalt-strike_icedid_njrat.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_ce08b48c1716a868978673d1b00c909f_cobalt-strike_icedid_njrat
- Size 853KB
- SHA256 b0f93582d491e1f67942672f745a6e127b4d097cf514cfb634684c3d9d17bc4b
- MD5 ce08b48c1716a868978673d1b00c909f
- SHA1 82b54df73e3bdbead7775876f228df980fae3b90
- SHA512 064ba1d34311ffdac25e042588073bb5bbdc78ed5a3f79b7536e959b6958ac72d36094c8d7464757d7a669c7f275d222891624ec739f619555fcef22017ea23c
- SSDEEP 24576:G/di1czs1CGRLLQH/7KrGKPVi+57zpBSh68/:G/diizs1TRLYerGKPVi+57zpBSh68
- TLSH T1FA051B19F6FA10E1E176C038D942662AFD713496433896EB53818A9A7F30BF8DE3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.