General
- Target 2026-07-10_4fdccfb8dc04ae465b16d64c76245830_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260710-h8k4faft4p
- SHA256 5e49930342c0117c323adb6da407664e50279b42552971a20c8ba2018f38a8ee
- MD5 4fdccfb8dc04ae465b16d64c76245830
- SHA1 06f2ad8c2aa36384623dbb8cdf4c99b91c53d121
- SHA512 f8d2b5f3da4cc05b2ca64bb27b865133bab716f721e06ea3907edd22be915e4aec553a5286304a49f96b977eca0a00ac464a87923ee76b41be2a54096b0a969b
- SSDEEP 6144:NYjBcs9F3AmM88DQo1kM0/XLJ7olgtlhnR1zwySLBrk:2jBcs9Fw7LsT124lhnR1zwTFk
- TLSH T1A354AE6AB7E409F9ED67C2BCC8F29525E53238610360DADF42D486651F233C46E3EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_4fdccfb8dc04ae465b16d64c76245830_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_4fdccfb8dc04ae465b16d64c76245830_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_4fdccfb8dc04ae465b16d64c76245830_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 5e49930342c0117c323adb6da407664e50279b42552971a20c8ba2018f38a8ee
- MD5 4fdccfb8dc04ae465b16d64c76245830
- SHA1 06f2ad8c2aa36384623dbb8cdf4c99b91c53d121
- SHA512 f8d2b5f3da4cc05b2ca64bb27b865133bab716f721e06ea3907edd22be915e4aec553a5286304a49f96b977eca0a00ac464a87923ee76b41be2a54096b0a969b
- SSDEEP 6144:NYjBcs9F3AmM88DQo1kM0/XLJ7olgtlhnR1zwySLBrk:2jBcs9Fw7LsT124lhnR1zwTFk
- TLSH T1A354AE6AB7E409F9ED67C2BCC8F29525E53238610360DADF42D486651F233C46E3EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.