General
- Target 2026-07-12_007906495500bee7f69a8928f27f6412_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- Sample260712-r85yaab16q
- SHA256 857b522ba2172bfc31e22d65379989565b1f25bdff4e81b947b9b076828741b6
- MD5 007906495500bee7f69a8928f27f6412
- SHA1 0c9a677e82b2f595170688ba5f8d37c0146a177c
- SHA512 679eddd27cbf93352b01fc8688f7c6be96a7ef6dc82ad0cb622bc400ad70d028b88e903b15f256c3585fd42746e51877fc7920c62ea64a368213d2554bf9ac32
- SSDEEP 12288:N0ydvIHpc29kwKsCJa82c3XeGcuF8bltGz+882mD3r1OmZr0Fpk7RUel:rwc29kwpCw8jeqmRI+8IPZr6rw
- TLSH T15F05012AB3A108F9DC67C27DC9F29512EA7238560750EAAB539486351F336C46F3EF41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_007906495500bee7f69a8928f27f6412_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_007906495500bee7f69a8928f27f6412_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_007906495500bee7f69a8928f27f6412_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- SHA256 857b522ba2172bfc31e22d65379989565b1f25bdff4e81b947b9b076828741b6
- MD5 007906495500bee7f69a8928f27f6412
- SHA1 0c9a677e82b2f595170688ba5f8d37c0146a177c
- SHA512 679eddd27cbf93352b01fc8688f7c6be96a7ef6dc82ad0cb622bc400ad70d028b88e903b15f256c3585fd42746e51877fc7920c62ea64a368213d2554bf9ac32
- SSDEEP 12288:N0ydvIHpc29kwKsCJa82c3XeGcuF8bltGz+882mD3r1OmZr0Fpk7RUel:rwc29kwpCw8jeqmRI+8IPZr6rw
- TLSH T15F05012AB3A108F9DC67C27DC9F29512EA7238560750EAAB539486351F336C46F3EF41
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1