General
- Target 2026-07-08_d35b055d5ddec0fe3c97d00ff2efbaf3_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- Sample260708-erkjssav6t
- SHA256 cb874c8a74d6c7527237740d465cd064f8eb378048410f97212f0a282f13c26b
- MD5 d35b055d5ddec0fe3c97d00ff2efbaf3
- SHA1 ab1f69b00457c89672928287dfb29f655781b597
- SHA512 5cae8c32deae7b42a84ca346e002a817491d57a36b95ab887884901a2d3fdb348f7ec0357ce2f6cf3d1fe4e9cd00c83b93350459ae35da2cb571a4448a46a00e
- SSDEEP 24576:62CcivJ+RFpD3eBR8nvn9ZyXLYKM/s7q:jlTFJOBR8nv9PU
- TLSH T1B4250129B3A01CF8FC2AD13CC9629512E972F8550361EAEF239496152F736D05B3FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_d35b055d5ddec0fe3c97d00ff2efbaf3_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_d35b055d5ddec0fe3c97d00ff2efbaf3_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- SHA256 cb874c8a74d6c7527237740d465cd064f8eb378048410f97212f0a282f13c26b
- MD5 d35b055d5ddec0fe3c97d00ff2efbaf3
- SHA1 ab1f69b00457c89672928287dfb29f655781b597
- SHA512 5cae8c32deae7b42a84ca346e002a817491d57a36b95ab887884901a2d3fdb348f7ec0357ce2f6cf3d1fe4e9cd00c83b93350459ae35da2cb571a4448a46a00e
- SSDEEP 24576:62CcivJ+RFpD3eBR8nvn9ZyXLYKM/s7q:jlTFJOBR8nv9PU
- TLSH T1B4250129B3A01CF8FC2AD13CC9629512E972F8550361EAEF239496152F736D05B3FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1