General
- Target 2026-07-20_84d72e5c40dedfad8700ec81e545dd6e_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- Sample260720-dd1s7ads3m
- SHA256 35ed80b4e4db1658d3bbe5feb4fab57d2815a6df7d5e64cf510c8b3e9ee61124
- MD5 84d72e5c40dedfad8700ec81e545dd6e
- SHA1 1f8a4bb7f952b63cb55a272fc5563f3cd4057f84
- SHA512 200f25e3ccf3d54f41f7979c67364ec015768dc7a8d477c33d3ffe9f1f0f328014a57c2c1d64683b1632643ea2be8c69174da9690f5a59fb3f17071116854527
- SSDEEP 12288:je4T6KWxX29uUXUBtJACRpxOPafIW7guzPMiFEBwMvSktTQADKGph2rsligt:a/X29ct/px5fIW7guzjGB7HtTlK7/g
- TLSH T17E05016DB79109F8DD2AC27ECEE2C415E53238150360EADF13A44A751F272C46E3EBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_84d72e5c40dedfad8700ec81e545dd6e_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_84d72e5c40dedfad8700ec81e545dd6e_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- SHA256 35ed80b4e4db1658d3bbe5feb4fab57d2815a6df7d5e64cf510c8b3e9ee61124
- MD5 84d72e5c40dedfad8700ec81e545dd6e
- SHA1 1f8a4bb7f952b63cb55a272fc5563f3cd4057f84
- SHA512 200f25e3ccf3d54f41f7979c67364ec015768dc7a8d477c33d3ffe9f1f0f328014a57c2c1d64683b1632643ea2be8c69174da9690f5a59fb3f17071116854527
- SSDEEP 12288:je4T6KWxX29uUXUBtJACRpxOPafIW7guzPMiFEBwMvSktTQADKGph2rsligt:a/X29ct/px5fIW7guzjGB7HtTlK7/g
- TLSH T17E05016DB79109F8DD2AC27ECEE2C415E53238150360EADF13A44A751F272C46E3EBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1