General
- Target 2026-07-30_824282b1996f10328316463f1de42e11_cobalt-strike_icedid_njrat_ryuk_vidar
- Size 2.7MB
- Sample260730-vy1glach67
- SHA256 c4c2969f7eeea317a4d2c9c6a199cdddd3919d15aa9c3f117e6c630f7f8d348c
- MD5 824282b1996f10328316463f1de42e11
- SHA1 c3faeed3c5b2d969f76c273114af33c8a9c16c39
- SHA512 d55d3e46823e6ecdd86e384e1b9f70ade340581c374e5e42337e36e6534fad23f804ebbd2497e6250bfa2566553af39e641dc195362f5ab714c8c8ec6e003d55
- SSDEEP 49152:Wq4Vu+QDK2tDkyHJ8v9ltjNXBVofhZTTSm6mGvKVO+n1:WMDJtK6SmXeN+1
- TLSH T152D5AE4BF25611ECD06AD0B8C75A5222FA717C490B25BAEF0790B6252F37EE05B3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_824282b1996f10328316463f1de42e11_cobalt-strike_icedid_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_824282b1996f10328316463f1de42e11_cobalt-strike_icedid_njrat_ryuk_vidar
- Size 2.7MB
- SHA256 c4c2969f7eeea317a4d2c9c6a199cdddd3919d15aa9c3f117e6c630f7f8d348c
- MD5 824282b1996f10328316463f1de42e11
- SHA1 c3faeed3c5b2d969f76c273114af33c8a9c16c39
- SHA512 d55d3e46823e6ecdd86e384e1b9f70ade340581c374e5e42337e36e6534fad23f804ebbd2497e6250bfa2566553af39e641dc195362f5ab714c8c8ec6e003d55
- SSDEEP 49152:Wq4Vu+QDK2tDkyHJ8v9ltjNXBVofhZTTSm6mGvKVO+n1:WMDJtK6SmXeN+1
- TLSH T152D5AE4BF25611ECD06AD0B8C75A5222FA717C490B25BAEF0790B6252F37EE05B3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1