General
- Target 2026-07-10_854e09b5bf72e9aad39650e16b7f0bfc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- Sample260710-h7z6zagv2w
- SHA256 00834087a6eff630139e3b0fcf3a9eacf42117ad37c1462479db85b38babfea8
- MD5 854e09b5bf72e9aad39650e16b7f0bfc
- SHA1 065b96edd9bfcafadd999005fd9cf54d9c48a8a7
- SHA512 f00f47f735eacc200eda3fe55b98b402beeadcc75022bdd3cd6545eda6fd04d200589f98d5f95c4d9107fc5df1265001bc5666b18eeb8b3e9ef5179f2fe8c755
- SSDEEP 6144:rIgxm3ns9MIAaX03T8jqpl6L0JBNFwjaJg3PfcKrKywbty9sDTv4PZ:1xm3s9vaAOzJdJAdGyktyaDTv4PZ
- TLSH T1ACA4AE6AF3901DF8FC27E17CC9A28511EA71F8550761EAEB1254C6252F732D01A3FB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_854e09b5bf72e9aad39650e16b7f0bfc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_854e09b5bf72e9aad39650e16b7f0bfc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_854e09b5bf72e9aad39650e16b7f0bfc_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- SHA256 00834087a6eff630139e3b0fcf3a9eacf42117ad37c1462479db85b38babfea8
- MD5 854e09b5bf72e9aad39650e16b7f0bfc
- SHA1 065b96edd9bfcafadd999005fd9cf54d9c48a8a7
- SHA512 f00f47f735eacc200eda3fe55b98b402beeadcc75022bdd3cd6545eda6fd04d200589f98d5f95c4d9107fc5df1265001bc5666b18eeb8b3e9ef5179f2fe8c755
- SSDEEP 6144:rIgxm3ns9MIAaX03T8jqpl6L0JBNFwjaJg3PfcKrKywbty9sDTv4PZ:1xm3s9vaAOzJdJAdGyktyaDTv4PZ
- TLSH T1ACA4AE6AF3901DF8FC27E17CC9A28511EA71F8550761EAEB1254C6252F732D01A3FB64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.