General
- Target 2026-08-01_6fee82441d0c5cbaa804d5e3c6d53131_cobalt-strike_icedid_mespinoza_ryuk
- Size 208KB
- Sample260801-dm23lscg44
- SHA256 4da4e246ffc975c4017c0889fe9fea63dca25e71dd15a58a94b2d7678fd4ac9c
- MD5 6fee82441d0c5cbaa804d5e3c6d53131
- SHA1 970dab8a174c6067dd64fc46e9093737ed37fe9c
- SHA512 9b2b9898e0be9f6cc763258d1752fe6ac7ec5068fea4ceb2b625a108f17e7179891499f2aa00ac52acddd3fc2be643754b30f246c56e156e2c18cbe81e47665b
- SSDEEP 6144:OpXB8Sj6rk30xAnmHRFIbaJIS6z0EGF12DX:6j6rk3MAnmHRFIbaJK0EG32D
- TLSH T18324374C532085F6F43B93F5CE686741B5E17469CB41A99B3BB482134FA3AC0AB7E718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_6fee82441d0c5cbaa804d5e3c6d53131_cobalt-strike_icedid_mespinoza_ryuk.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_6fee82441d0c5cbaa804d5e3c6d53131_cobalt-strike_icedid_mespinoza_ryuk.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_6fee82441d0c5cbaa804d5e3c6d53131_cobalt-strike_icedid_mespinoza_ryuk
- Size 208KB
- SHA256 4da4e246ffc975c4017c0889fe9fea63dca25e71dd15a58a94b2d7678fd4ac9c
- MD5 6fee82441d0c5cbaa804d5e3c6d53131
- SHA1 970dab8a174c6067dd64fc46e9093737ed37fe9c
- SHA512 9b2b9898e0be9f6cc763258d1752fe6ac7ec5068fea4ceb2b625a108f17e7179891499f2aa00ac52acddd3fc2be643754b30f246c56e156e2c18cbe81e47665b
- SSDEEP 6144:OpXB8Sj6rk30xAnmHRFIbaJIS6z0EGF12DX:6j6rk3MAnmHRFIbaJK0EG32D
- TLSH T18324374C532085F6F43B93F5CE686741B5E17469CB41A99B3BB482134FA3AC0AB7E718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Looks for VMWare services registry key.