General
- Target 2026-07-18_3cd788e4877214e148b2b933c0001b29_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- Sample260718-j69jpagy3z
- SHA256 dfdd9f89e199631d6afb9423e92fe32dac8e473e0ab7813c438ba74a5a1e8d60
- MD5 3cd788e4877214e148b2b933c0001b29
- SHA1 554219401d35cd85fe8e91534fada762fb99527d
- SHA512 31bd0080a4c26b566c3eb67c90ab2cf23ed4c9a15bfbeb9d58f1ece8180b0f69320648591cf5b2fdf3977aefcc9bfc013b51b618ca558b7ec7fbf1cf9c54cfe3
- SSDEEP 12288:sFxX6WefN29Quj6PoGX11bqtq2nKncB/85O8mICpgllz+4XY1fb/fTnGQX:F1N29Qlt3qs2MpfvlY1D/fjxX
- TLSH T100050129B79109F9DC3AC2BDCDF2D521E57178240351DA9B43A492661F237C06E3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_3cd788e4877214e148b2b933c0001b29_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_3cd788e4877214e148b2b933c0001b29_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_3cd788e4877214e148b2b933c0001b29_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- SHA256 dfdd9f89e199631d6afb9423e92fe32dac8e473e0ab7813c438ba74a5a1e8d60
- MD5 3cd788e4877214e148b2b933c0001b29
- SHA1 554219401d35cd85fe8e91534fada762fb99527d
- SHA512 31bd0080a4c26b566c3eb67c90ab2cf23ed4c9a15bfbeb9d58f1ece8180b0f69320648591cf5b2fdf3977aefcc9bfc013b51b618ca558b7ec7fbf1cf9c54cfe3
- SSDEEP 12288:sFxX6WefN29Quj6PoGX11bqtq2nKncB/85O8mICpgllz+4XY1fb/fTnGQX:F1N29Qlt3qs2MpfvlY1D/fjxX
- TLSH T100050129B79109F9DC3AC2BDCDF2D521E57178240351DA9B43A492661F237C06E3EF62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1