General
- Target 2026-07-27_257a03a7cfd5a27cb9aa1fc1f521c3c8_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260727-daxx5aha64
- SHA256 a07e0d555ff00bcd10b6727b3ba1e84c756a75eb6500e568b64d66b749cbeb50
- MD5 257a03a7cfd5a27cb9aa1fc1f521c3c8
- SHA1 87a8c59ca67e78032510bd8667a2e7352941f296
- SHA512 4588c74d1da3b10ef3d8f0c76595a6b13b2fd66894ab20024521e0042109a7f5847323cdbb0687643a2d734d6845be8f31c285b2633656ebcca9d40dd505a728
- SSDEEP 6144:A1rMDs9/NR+BMghD9vOi7JDePJ7olgtlhnOkC0sxeopJD+s:ArMDs9/NMiapFO24lhn49d
- TLSH T15A54AE79B7A40CF9DC67C27CC9F28416EA7278250364DAEB429446651F337C06E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_257a03a7cfd5a27cb9aa1fc1f521c3c8_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_257a03a7cfd5a27cb9aa1fc1f521c3c8_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_257a03a7cfd5a27cb9aa1fc1f521c3c8_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 a07e0d555ff00bcd10b6727b3ba1e84c756a75eb6500e568b64d66b749cbeb50
- MD5 257a03a7cfd5a27cb9aa1fc1f521c3c8
- SHA1 87a8c59ca67e78032510bd8667a2e7352941f296
- SHA512 4588c74d1da3b10ef3d8f0c76595a6b13b2fd66894ab20024521e0042109a7f5847323cdbb0687643a2d734d6845be8f31c285b2633656ebcca9d40dd505a728
- SSDEEP 6144:A1rMDs9/NR+BMghD9vOi7JDePJ7olgtlhnOkC0sxeopJD+s:ArMDs9/NMiapFO24lhn49d
- TLSH T15A54AE79B7A40CF9DC67C27CC9F28416EA7278250364DAEB429446651F337C06E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.