General
- Target 2026-07-17_3b1d00ef7a1b8b554435e7ae9f7f0289_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260717-j5k5psft2l
- SHA256 d38b5eef0a32f3d75776316e6037dd1257fbbe0da4175c2d28dc2ba5a341e121
- MD5 3b1d00ef7a1b8b554435e7ae9f7f0289
- SHA1 2754154be94287520b01a7c1e25f87d57890f1e7
- SHA512 1e4154fe8ff2d3d4de84a560fdcb59d47375d863bcac743bcce8c536b2c0a18570a1f7c1065a4a053e08ad60021c21b0e69a90e3b55726a2e6840e2289fa6cec
- SSDEEP 24576:NST0AYy4E9Wx/tEX6PoC0jIMuijqSXvpxb8HXKHMfshoT:NS0AYsWxyXGohjIMjjXw6HH
- TLSH T14F75BE0BB26508EAC2A5C074CE16D531A761BC4D0BF299FB3591F2D92E36AE07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_3b1d00ef7a1b8b554435e7ae9f7f0289_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_3b1d00ef7a1b8b554435e7ae9f7f0289_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 d38b5eef0a32f3d75776316e6037dd1257fbbe0da4175c2d28dc2ba5a341e121
- MD5 3b1d00ef7a1b8b554435e7ae9f7f0289
- SHA1 2754154be94287520b01a7c1e25f87d57890f1e7
- SHA512 1e4154fe8ff2d3d4de84a560fdcb59d47375d863bcac743bcce8c536b2c0a18570a1f7c1065a4a053e08ad60021c21b0e69a90e3b55726a2e6840e2289fa6cec
- SSDEEP 24576:NST0AYy4E9Wx/tEX6PoC0jIMuijqSXvpxb8HXKHMfshoT:NS0AYsWxyXGohjIMjjXw6HH
- TLSH T14F75BE0BB26508EAC2A5C074CE16D531A761BC4D0BF299FB3591F2D92E36AE07F39711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory