General
- Target 2026-07-20_9ba369838208068c02c7deec2dff816d_cobalt-strike_icedid_njrat_stealc_vidar
- Size 1.9MB
- Sample260720-p7mzzaaz3n
- SHA256 c2053b1a4802f3718763bbcfad61836907b34d250473fa7ca5ce8da546913729
- MD5 9ba369838208068c02c7deec2dff816d
- SHA1 5a8536908e34ef6e1dd43e195c68d3287d39bc52
- SHA512 738a6401801e208063ee971d35f416043bb1096f62ef10d9d98628ca7011aeed9d57bc8a0c62a1fa3ce16086e4074f7d45d5e09bb066bd92ee799ecd625f66d7
- SSDEEP 24576:l4PXKWCDHGv3zYUrwsW2FkAc4kxcuCDEmJ1IOJN:iP6J7GPckwsW4kEkxDK5IOJ
- TLSH T18C95E09A376405F5D467923CC6838A06E7B278041761D7CF02A9E7BE2F37AD05D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_9ba369838208068c02c7deec2dff816d_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_9ba369838208068c02c7deec2dff816d_cobalt-strike_icedid_njrat_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_9ba369838208068c02c7deec2dff816d_cobalt-strike_icedid_njrat_stealc_vidar
- Size 1.9MB
- SHA256 c2053b1a4802f3718763bbcfad61836907b34d250473fa7ca5ce8da546913729
- MD5 9ba369838208068c02c7deec2dff816d
- SHA1 5a8536908e34ef6e1dd43e195c68d3287d39bc52
- SHA512 738a6401801e208063ee971d35f416043bb1096f62ef10d9d98628ca7011aeed9d57bc8a0c62a1fa3ce16086e4074f7d45d5e09bb066bd92ee799ecd625f66d7
- SSDEEP 24576:l4PXKWCDHGv3zYUrwsW2FkAc4kxcuCDEmJ1IOJN:iP6J7GPckwsW4kEkxDK5IOJ
- TLSH T18C95E09A376405F5D467923CC6838A06E7B278041761D7CF02A9E7BE2F37AD05D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.