General
- Target 2026-07-14_0fe8843742efee274803d8332793ab36_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- Sample260714-e6exvsgw3y
- SHA256 5a64ad8a518a124ad2edccd513e8b47d5e8e54ed5c222bf85baf5d00d5342225
- MD5 0fe8843742efee274803d8332793ab36
- SHA1 34a1ece161237f96c0f8455666e6dd2ddd5e6ee2
- SHA512 5a168bb72b2148b5262bb574882b8cc58f00cdb84b08a8f3b8265d26e819f4483e5f35f13dff926a8a5fa4da5d06b515a68e92bc113bb32d555ad3c95d95da55
- SSDEEP 12288:s/Khzpwpc29TmQYhVu4a1zlRPjVNzBKUoF0vsY8Yh+4e/GmtmY4lzIpAJy:v4c29LAGzr55oLGh+3ZZ4OAI
- TLSH T1910501ADF3A049F8DC67C27CCDA28522E63274650750FADB03A449261F376C0AE3EB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_0fe8843742efee274803d8332793ab36_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_0fe8843742efee274803d8332793ab36_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- SHA256 5a64ad8a518a124ad2edccd513e8b47d5e8e54ed5c222bf85baf5d00d5342225
- MD5 0fe8843742efee274803d8332793ab36
- SHA1 34a1ece161237f96c0f8455666e6dd2ddd5e6ee2
- SHA512 5a168bb72b2148b5262bb574882b8cc58f00cdb84b08a8f3b8265d26e819f4483e5f35f13dff926a8a5fa4da5d06b515a68e92bc113bb32d555ad3c95d95da55
- SSDEEP 12288:s/Khzpwpc29TmQYhVu4a1zlRPjVNzBKUoF0vsY8Yh+4e/GmtmY4lzIpAJy:v4c29LAGzr55oLGh+3ZZ4OAI
- TLSH T1910501ADF3A049F8DC67C27CCDA28522E63274650750FADB03A449261F376C0AE3EB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1