General
- Target 2026-07-12_b685143320a5a27cf57132b7d51148c0_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260712-zbyfyaav9w
- SHA256 d66c422950edecae7d62a10e4987d0183b44443efdeceabc73bcc8980a0ba54a
- MD5 b685143320a5a27cf57132b7d51148c0
- SHA1 d8015eb9af834fa0ce598cfe34d4de03b669729a
- SHA512 8ae765a698b7ae0c1b31314c405700d1521d0c44b60cdf9d8d8f37690f47e1f2a9750e3cf3c0632ddda15049e9ad794930e5f731812db52317738ad15d8ee3d7
- SSDEEP 12288:1zV6dPjkJJ7wNKyWTyz3MqX10DjNBs9fEYonGnWlE0fwgZbMg8+Jl7mUbYa2lIRC:1z8dPjkJJ7wNETyz8YYlE3gT8e7zYoRC
- TLSH T1A8F4384663EC42E4F1F3AA389972454ADB72BC524B75C2CF0254166E1E73AD18D3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_b685143320a5a27cf57132b7d51148c0_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_b685143320a5a27cf57132b7d51148c0_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_b685143320a5a27cf57132b7d51148c0_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 d66c422950edecae7d62a10e4987d0183b44443efdeceabc73bcc8980a0ba54a
- MD5 b685143320a5a27cf57132b7d51148c0
- SHA1 d8015eb9af834fa0ce598cfe34d4de03b669729a
- SHA512 8ae765a698b7ae0c1b31314c405700d1521d0c44b60cdf9d8d8f37690f47e1f2a9750e3cf3c0632ddda15049e9ad794930e5f731812db52317738ad15d8ee3d7
- SSDEEP 12288:1zV6dPjkJJ7wNKyWTyz3MqX10DjNBs9fEYonGnWlE0fwgZbMg8+Jl7mUbYa2lIRC:1z8dPjkJJ7wNETyz8YYlE3gT8e7zYoRC
- TLSH T1A8F4384663EC42E4F1F3AA389972454ADB72BC524B75C2CF0254166E1E73AD18D3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.