General
- Target 2026-07-07_c5fff2e82a0bfd8fcd959c2375aa0a89_cobalt-strike_icedid_njrat_vidar
- Size 262KB
- Sample260707-ly3ghsfs31
- SHA256 29b69d84ac20d89699581b6a263bdb82bd55491d5599eb6d2f04a505a9162277
- MD5 c5fff2e82a0bfd8fcd959c2375aa0a89
- SHA1 45aa1bf164381a928a1a6f196ed218f7704214c8
- SHA512 000643e13314a42f9a171f93c696f98445823474bcfcd830a8587e15906bb3e38ce1bea0fa1cc9cb1e20a7763940f0fb25238cacca3b2b05a541d6233e5dc47e
- SSDEEP 3072:VcqiEkF6SQ3g9g9nqMsx7ge1Z+pJhoZ3Dx6Gxt5kp9QS4kigHXrvKoGtJ:V0E26LQ9g9RM7geihoZ3DGpnE
- TLSH T117446C1676D90CB8F167C239C9565502E6B27C0607A4D7EF17A0C27B1F236F09A3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_c5fff2e82a0bfd8fcd959c2375aa0a89_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_c5fff2e82a0bfd8fcd959c2375aa0a89_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_c5fff2e82a0bfd8fcd959c2375aa0a89_cobalt-strike_icedid_njrat_vidar
- Size 262KB
- SHA256 29b69d84ac20d89699581b6a263bdb82bd55491d5599eb6d2f04a505a9162277
- MD5 c5fff2e82a0bfd8fcd959c2375aa0a89
- SHA1 45aa1bf164381a928a1a6f196ed218f7704214c8
- SHA512 000643e13314a42f9a171f93c696f98445823474bcfcd830a8587e15906bb3e38ce1bea0fa1cc9cb1e20a7763940f0fb25238cacca3b2b05a541d6233e5dc47e
- SSDEEP 3072:VcqiEkF6SQ3g9g9nqMsx7ge1Z+pJhoZ3Dx6Gxt5kp9QS4kigHXrvKoGtJ:V0E26LQ9g9RM7geihoZ3DGpnE
- TLSH T117446C1676D90CB8F167C239C9565502E6B27C0607A4D7EF17A0C27B1F236F09A3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.