General

  • Target
    2026-07-12_007906495500bee7f69a8928f27f6412_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
  • Size 819KB
  • Sample260712-r85yaab16q
  • SHA256 857b522ba2172bfc31e22d65379989565b1f25bdff4e81b947b9b076828741b6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-12_007906495500bee7f69a8928f27f6412_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
    • Size 819KB
    • SHA256 857b522ba2172bfc31e22d65379989565b1f25bdff4e81b947b9b076828741b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks