General
- Target 2026-07-22_fb3827118285cfbc050cc15db1363f3f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.7MB
- Sample260722-a1chbsha67
- SHA256 1c8b69288275e5d3d11d9d8cb098a5ca999e329d19964968d6e6f9e46af94019
- MD5 fb3827118285cfbc050cc15db1363f3f
- SHA1 f8a86ea62e41e9ad06bbf44ec68a29a798c372a9
- SHA512 917c61a3c13fe57da936e22d333ced65f95c43517ad9e82b2e714685da62805d0d22ba89a14aa08e21021654232bb2e04ed00d8870a826208de96b8bbb17fa0a
- SSDEEP 49152:7gjuL6Xc7UlI9FQEWmCdIEJHsINjghBjskW3DeeQV7wQo:NLa7QV7w1
- TLSH T1F0859D15769A65EDC05AC4B0C38286626A6138CB0F35FDEF4590F2393F7AAF41F39624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_fb3827118285cfbc050cc15db1363f3f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_fb3827118285cfbc050cc15db1363f3f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_fb3827118285cfbc050cc15db1363f3f_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.7MB
- SHA256 1c8b69288275e5d3d11d9d8cb098a5ca999e329d19964968d6e6f9e46af94019
- MD5 fb3827118285cfbc050cc15db1363f3f
- SHA1 f8a86ea62e41e9ad06bbf44ec68a29a798c372a9
- SHA512 917c61a3c13fe57da936e22d333ced65f95c43517ad9e82b2e714685da62805d0d22ba89a14aa08e21021654232bb2e04ed00d8870a826208de96b8bbb17fa0a
- SSDEEP 49152:7gjuL6Xc7UlI9FQEWmCdIEJHsINjghBjskW3DeeQV7wQo:NLa7QV7w1
- TLSH T1F0859D15769A65EDC05AC4B0C38286626A6138CB0F35FDEF4590F2393F7AAF41F39624
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory