General
- Target 2026-07-08_e96e641bd5b71b6d073d89d720338c05_cobalt-strike_icedid_njrat
- Size 455KB
- Sample260708-ln48csdy9t
- SHA256 6a836154a9577bb330ad7be5756b2f9aed6fe48c9440b5fb4ddc0f2a8449b49b
- MD5 e96e641bd5b71b6d073d89d720338c05
- SHA1 8d519bf242dcc6fe138b1f9870fffdbed8a9960f
- SHA512 9918acfeabdc5725782b2ac97b0ecdec9ce3794a3ca1b52c9dbf1c4f498d5c55f49a51dc7ae1f14e128974c985d9b5a5eed98f69a48c8e9e3ddd1f608b07895f
- SSDEEP 6144:/g+Ydist9s9sT828qU6hwCN0hRjHpdQ2hdTsDQwMIqb8K3HNxv:/g+I9t9s9UCqU6iCN0VdT4QwBqbvNxv
- TLSH T136A44A90F3E414E8F1B79A358D764511DAB67C5A1B31DE8F02A8261A1F33AD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_e96e641bd5b71b6d073d89d720338c05_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_e96e641bd5b71b6d073d89d720338c05_cobalt-strike_icedid_njrat.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_e96e641bd5b71b6d073d89d720338c05_cobalt-strike_icedid_njrat
- Size 455KB
- SHA256 6a836154a9577bb330ad7be5756b2f9aed6fe48c9440b5fb4ddc0f2a8449b49b
- MD5 e96e641bd5b71b6d073d89d720338c05
- SHA1 8d519bf242dcc6fe138b1f9870fffdbed8a9960f
- SHA512 9918acfeabdc5725782b2ac97b0ecdec9ce3794a3ca1b52c9dbf1c4f498d5c55f49a51dc7ae1f14e128974c985d9b5a5eed98f69a48c8e9e3ddd1f608b07895f
- SSDEEP 6144:/g+Ydist9s9sT828qU6hwCN0hRjHpdQ2hdTsDQwMIqb8K3HNxv:/g+I9t9s9UCqU6iCN0VdT4QwBqbvNxv
- TLSH T136A44A90F3E414E8F1B79A358D764511DAB67C5A1B31DE8F02A8261A1F33AD18D39F32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.