General
- Target 2026-07-24_edd1a181cfaa9501aa32ee8d5f0f186d_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260724-wbtafahn4v
- SHA256 c2dd6083cf24784000da86baead69d7f0e84379f79317c3156eea433f224494f
- MD5 edd1a181cfaa9501aa32ee8d5f0f186d
- SHA1 c05fd7ce7ed54caeb334f9eec1cb3e4d3543e9b2
- SHA512 9bb41fa6f4b77d9bdfd126aa5b9f4528d312648433f61757f48b6f6d974b388bcbb75b1b7abfcb85a4be14d87c74a85853b116a751a3f85a6b31f7c2c0aeac20
- SSDEEP 12288:TcfSVKkSXGvvlSZ/amk1GAUaeDjvZs91sYon8nW0bLDw1ePMg8+Jl7mUbYaj95CR:TcaVKkSXGvvg/amoiGG0bA1u8e7zY49g
- TLSH T151F4284263EC42E4F1F7A63899724256DBB2BC524B35C2CF0254566E1E73AD18D3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-24_edd1a181cfaa9501aa32ee8d5f0f186d_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_edd1a181cfaa9501aa32ee8d5f0f186d_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_edd1a181cfaa9501aa32ee8d5f0f186d_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 c2dd6083cf24784000da86baead69d7f0e84379f79317c3156eea433f224494f
- MD5 edd1a181cfaa9501aa32ee8d5f0f186d
- SHA1 c05fd7ce7ed54caeb334f9eec1cb3e4d3543e9b2
- SHA512 9bb41fa6f4b77d9bdfd126aa5b9f4528d312648433f61757f48b6f6d974b388bcbb75b1b7abfcb85a4be14d87c74a85853b116a751a3f85a6b31f7c2c0aeac20
- SSDEEP 12288:TcfSVKkSXGvvlSZ/amk1GAUaeDjvZs91sYon8nW0bLDw1ePMg8+Jl7mUbYaj95CR:TcaVKkSXGvvg/amoiGG0bA1u8e7zY49g
- TLSH T151F4284263EC42E4F1F7A63899724256DBB2BC524B35C2CF0254566E1E73AD18D3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.