General
- Target 2026-07-23_0005bcaf98f6c820f6df817890ba7b07_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260723-jth6zaad23
- SHA256 8ec0e7a1d785edfcd16dffe678a22e9438c7e1901e246477784be0e7339c0444
- MD5 0005bcaf98f6c820f6df817890ba7b07
- SHA1 22414dce0e13a94cc4d4141f83cd08614ee3d142
- SHA512 c0c55ed7307390cb0387a648307e2c66c0479c40c468a0f3f578f3dbf76346715a8a11ad53d9bbb84ae5290c09877a434e81f1fba6d19b9750421a24f8927969
- SSDEEP 6144:fMaJkHws9yHWZ3iMimD7SyR0ovNLJ7olgtlhn4S9+Vbk:kaJkHws9y2dnjnhf24lhnLybk
- TLSH T11B549D29B3E009F9ED67C27CCDF28525EA727C650360DADB429486651F233C46E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_0005bcaf98f6c820f6df817890ba7b07_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_0005bcaf98f6c820f6df817890ba7b07_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_0005bcaf98f6c820f6df817890ba7b07_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 8ec0e7a1d785edfcd16dffe678a22e9438c7e1901e246477784be0e7339c0444
- MD5 0005bcaf98f6c820f6df817890ba7b07
- SHA1 22414dce0e13a94cc4d4141f83cd08614ee3d142
- SHA512 c0c55ed7307390cb0387a648307e2c66c0479c40c468a0f3f578f3dbf76346715a8a11ad53d9bbb84ae5290c09877a434e81f1fba6d19b9750421a24f8927969
- SSDEEP 6144:fMaJkHws9yHWZ3iMimD7SyR0ovNLJ7olgtlhn4S9+Vbk:kaJkHws9y2dnjnhf24lhnLybk
- TLSH T11B549D29B3E009F9ED67C27CCDF28525EA727C650360DADB429486651F233C46E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.