General
- Target 2026-07-10_8123c22a7eac4c7bd0cd3bd94bb1b081_cobalt-strike_icedid_njrat_stealc_vidar
- Size 4.4MB
- Sample260710-mdfyfsav5t
- SHA256 da70e201399499595a3cb3c3154708ac561b69686f6ccb009018e567f03eb66c
- MD5 8123c22a7eac4c7bd0cd3bd94bb1b081
- SHA1 5c479917853ed1a6b378ca61af1d4de371c1c4c0
- SHA512 f8c717de2a395913d030a3b023bbeb9b20884a28c5ecb89ccf6f63b1a095213e372bd35b80fcdac517a3eb335e7239fc611acdfcc7ab24eca1140f12b20be12a
- SSDEEP 49152:0AwsACGHC4+8scLsOLyCFn/gz0waogXboDoNU73r2Kt/:PjG/M0wafo40
- TLSH T1CB261A0A33DC4194F1F7A27D89BB5A02D1B774551B31C6CF06A0428E2FB3EE599BA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_8123c22a7eac4c7bd0cd3bd94bb1b081_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_8123c22a7eac4c7bd0cd3bd94bb1b081_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_8123c22a7eac4c7bd0cd3bd94bb1b081_cobalt-strike_icedid_njrat_stealc_vidar
- Size 4.4MB
- SHA256 da70e201399499595a3cb3c3154708ac561b69686f6ccb009018e567f03eb66c
- MD5 8123c22a7eac4c7bd0cd3bd94bb1b081
- SHA1 5c479917853ed1a6b378ca61af1d4de371c1c4c0
- SHA512 f8c717de2a395913d030a3b023bbeb9b20884a28c5ecb89ccf6f63b1a095213e372bd35b80fcdac517a3eb335e7239fc611acdfcc7ab24eca1140f12b20be12a
- SSDEEP 49152:0AwsACGHC4+8scLsOLyCFn/gz0waogXboDoNU73r2Kt/:PjG/M0wafo40
- TLSH T1CB261A0A33DC4194F1F7A27D89BB5A02D1B774551B31C6CF06A0428E2FB3EE599BA361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.