General
- Target 2026-07-29_9be0e1d464e52a38ea2bb4c2252da7ae_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- Sample260729-qdhntsvdrd
- SHA256 1968c9108fdde794d8b7221cd0d0b2e9028c7d571b598a7ad0d1b1219f465511
- MD5 9be0e1d464e52a38ea2bb4c2252da7ae
- SHA1 25a2a863c52a039985f555f2f2fb65771c56e753
- SHA512 142a20d78e1484c1e9dcec811307267120074b50a021a84716c724f4839fc67980765c2b3886469918018f7029e678f220795171ea60705a9cf1feb799ec71db
- SSDEEP 24576:cg429uMgKK1jczrUv3749Bm2yf8IP8ytjq4b0Ppmro:L42gMgKK+zov+yEIP8v4b0/
- TLSH T12905F129B7A519F8EC67C17DC9E3C512DA7238550360EA9B43A046361F237D0AE3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_9be0e1d464e52a38ea2bb4c2252da7ae_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_9be0e1d464e52a38ea2bb4c2252da7ae_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- SHA256 1968c9108fdde794d8b7221cd0d0b2e9028c7d571b598a7ad0d1b1219f465511
- MD5 9be0e1d464e52a38ea2bb4c2252da7ae
- SHA1 25a2a863c52a039985f555f2f2fb65771c56e753
- SHA512 142a20d78e1484c1e9dcec811307267120074b50a021a84716c724f4839fc67980765c2b3886469918018f7029e678f220795171ea60705a9cf1feb799ec71db
- SSDEEP 24576:cg429uMgKK1jczrUv3749Bm2yf8IP8ytjq4b0Ppmro:L42gMgKK+zov+yEIP8v4b0/
- TLSH T12905F129B7A519F8EC67C17DC9E3C512DA7238550360EA9B43A046361F237D0AE3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory