General
- Target 2026-07-27_149414e6ee10bbdb20260698afdded0e_cobalt-strike_icedid_njrat
- Size 749KB
- Sample260727-edy52avfmb
- SHA256 566325e0527916d2e4488ab8c3d3d5a506ded0a9c6f0830a8fa658e9bcf36406
- MD5 149414e6ee10bbdb20260698afdded0e
- SHA1 d29bb57748ce3d8b66f0ccfb2e85b4b886ff0a69
- SHA512 5e98f64cf69dae5ea494ccaf7c00a9ba00b6c9c901372f19c232f9987bf617a453736ca7154eaa2e2b89aefd31527926056031b85a1df88fa5013f3908b90a06
- SSDEEP 12288:QP8eeSLVen2Rup3LSHqvQksb27/vnsiXhRgtkp0XP54:W8eeSLVvRup3LSksbi/v9+kq/
- TLSH T1B2F4091AF6F610E4E5BAC1799962312AFC713CA54734ABCB57804A0A1F31FE49E3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_149414e6ee10bbdb20260698afdded0e_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_149414e6ee10bbdb20260698afdded0e_cobalt-strike_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_149414e6ee10bbdb20260698afdded0e_cobalt-strike_icedid_njrat
- Size 749KB
- SHA256 566325e0527916d2e4488ab8c3d3d5a506ded0a9c6f0830a8fa658e9bcf36406
- MD5 149414e6ee10bbdb20260698afdded0e
- SHA1 d29bb57748ce3d8b66f0ccfb2e85b4b886ff0a69
- SHA512 5e98f64cf69dae5ea494ccaf7c00a9ba00b6c9c901372f19c232f9987bf617a453736ca7154eaa2e2b89aefd31527926056031b85a1df88fa5013f3908b90a06
- SSDEEP 12288:QP8eeSLVen2Rup3LSHqvQksb27/vnsiXhRgtkp0XP54:W8eeSLVvRup3LSksbi/v9+kq/
- TLSH T1B2F4091AF6F610E4E5BAC1799962312AFC713CA54734ABCB57804A0A1F31FE49E3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1