General
- Target 2026-07-08_b749121e4cec4d95568f9fe932c6e7e7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- Sample260708-gs97yscw4k
- SHA256 bd81aaa10d414a9e222b278bab3e7fbf8ac8c783272f53a8c702938a68b3633f
- MD5 b749121e4cec4d95568f9fe932c6e7e7
- SHA1 127c6e55e40df2e381f4b5a3d9197d0a10f314b1
- SHA512 ab77737e0ea463a23505a9920ba0770b18aec51f6757a0f5f55c6757ed159b84ef8d18456a843d15d008c2b976cdd8eece9b58cfb83d626c853e1813ee6ac56d
- SSDEEP 6144:ds1dGF5Rs9xSEk7D5V31guW6m6LVJBNFwjaJg3PfcKrKywbB5JnJ64/rNSp:CdGFs9EPpn1WZ0dJAdGykzJn5W
- TLSH T13BA4AE29F3A018F8FC3AD17C89B29511E972F8550750EAEB5254C62A2F732D01E3FB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_b749121e4cec4d95568f9fe932c6e7e7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_b749121e4cec4d95568f9fe932c6e7e7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_b749121e4cec4d95568f9fe932c6e7e7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- SHA256 bd81aaa10d414a9e222b278bab3e7fbf8ac8c783272f53a8c702938a68b3633f
- MD5 b749121e4cec4d95568f9fe932c6e7e7
- SHA1 127c6e55e40df2e381f4b5a3d9197d0a10f314b1
- SHA512 ab77737e0ea463a23505a9920ba0770b18aec51f6757a0f5f55c6757ed159b84ef8d18456a843d15d008c2b976cdd8eece9b58cfb83d626c853e1813ee6ac56d
- SSDEEP 6144:ds1dGF5Rs9xSEk7D5V31guW6m6LVJBNFwjaJg3PfcKrKywbB5JnJ64/rNSp:CdGFs9EPpn1WZ0dJAdGykzJn5W
- TLSH T13BA4AE29F3A018F8FC3AD17C89B29511E972F8550750EAEB5254C62A2F732D01E3FB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.