General
- Target 2026-07-22_3972db6f4e1fba74377cc74853102781_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- Sample260723-aep7asbk7s
- SHA256 bbc5b4224893bebc6fb72cc1288c2114c921958e4d5781afa382ab15f0e9f5e0
- MD5 3972db6f4e1fba74377cc74853102781
- SHA1 7226bbb699b9a46ac479f0b1e312fd1c4c764a35
- SHA512 270b466c9e23e34c3e5a95b77c980cf5993d746de4fef2aee99fb089a425159d311bca5b898b3ecdadde5055e14e0dc9ac67c79863f9fffa31c77fc963d76a21
- SSDEEP 12288:OvuT6F4p729VDpi2S4qSf/3fMfUBvF1b8Hw4ayTAnZXJaIW5ltgsbApXbhToT:WQ729hqSXvpxb8HXKHMfshoT
- TLSH T14C050129B39409F9EC66C27DC9F3C512E67178240360EADF43A485661F336D4AE3EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_3972db6f4e1fba74377cc74853102781_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_3972db6f4e1fba74377cc74853102781_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- SHA256 bbc5b4224893bebc6fb72cc1288c2114c921958e4d5781afa382ab15f0e9f5e0
- MD5 3972db6f4e1fba74377cc74853102781
- SHA1 7226bbb699b9a46ac479f0b1e312fd1c4c764a35
- SHA512 270b466c9e23e34c3e5a95b77c980cf5993d746de4fef2aee99fb089a425159d311bca5b898b3ecdadde5055e14e0dc9ac67c79863f9fffa31c77fc963d76a21
- SSDEEP 12288:OvuT6F4p729VDpi2S4qSf/3fMfUBvF1b8Hw4ayTAnZXJaIW5ltgsbApXbhToT:WQ729hqSXvpxb8HXKHMfshoT
- TLSH T14C050129B39409F9EC66C27DC9F3C512E67178240360EADF43A485661F336D4AE3EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1