General
- Target 2026-07-31_20603dad371da8c34a9bb20ae6b11256_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- Sample260731-dyw1qsshqb
- SHA256 7ceefaf9949a3117f1a80adf3000bdf9d1a077a529de615f0fb50c0df3137d51
- MD5 20603dad371da8c34a9bb20ae6b11256
- SHA1 bd10d22fdcaa6041ff77767851ebce340dccbefa
- SHA512 0a3941a45a968b1425932c65785163021989ed3dbcd900ce377b0c7494058ff772b142b6825f853c924ee917ab91437752ae8712f4555d6e9953746b06786b12
- SSDEEP 24576:xH08ciJ+R5GMgKK1jczrUv3749Bm2yf8IP8ytjq4b0Ppmro:Zz2UMgKK+zov+yEIP8v4b0/
- TLSH T10225F119B36019F8FC2AD17CCAA69502D972F8550760EAEF135496263F336D05E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_20603dad371da8c34a9bb20ae6b11256_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_20603dad371da8c34a9bb20ae6b11256_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- SHA256 7ceefaf9949a3117f1a80adf3000bdf9d1a077a529de615f0fb50c0df3137d51
- MD5 20603dad371da8c34a9bb20ae6b11256
- SHA1 bd10d22fdcaa6041ff77767851ebce340dccbefa
- SHA512 0a3941a45a968b1425932c65785163021989ed3dbcd900ce377b0c7494058ff772b142b6825f853c924ee917ab91437752ae8712f4555d6e9953746b06786b12
- SSDEEP 24576:xH08ciJ+R5GMgKK1jczrUv3749Bm2yf8IP8ytjq4b0Ppmro:Zz2UMgKK+zov+yEIP8v4b0/
- TLSH T10225F119B36019F8FC2AD17CCAA69502D972F8550760EAEF135496263F336D05E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1