General
- Target 2026-08-02_bbf8f214940d16255c4e19350175a440_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260802-q3w8hszzdz
- SHA256 2e90304febeca442159398509e04ba44e6ee5d4cba3c976efe3f3ac50fffd55b
- MD5 bbf8f214940d16255c4e19350175a440
- SHA1 1d885459a4162dcc5e39a034d051d2b6bfa66b06
- SHA512 ae577501a7f169bff549eb397d32fbc913f0ebf9b69d961cab8c2fddb19d9a75143baa3073874879fec8197a1cf3d18ba06231ebcbb6640be47c12dd14220bf9
- SSDEEP 12288:ulbv2Gkfms2LQ0K47+4kuenNDjNXlq9RsYon7nWbgIFwgvIMg8+Jl7mUbYalBSy:ulL2Gkfms2L447+Nblq9Rxbg1gG8e7zh
- TLSH T122F4388663EC42E4F1F7AB3899724146DB72BC524B75C2CF0254166E1E73AD18D3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_bbf8f214940d16255c4e19350175a440_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_bbf8f214940d16255c4e19350175a440_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_bbf8f214940d16255c4e19350175a440_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 2e90304febeca442159398509e04ba44e6ee5d4cba3c976efe3f3ac50fffd55b
- MD5 bbf8f214940d16255c4e19350175a440
- SHA1 1d885459a4162dcc5e39a034d051d2b6bfa66b06
- SHA512 ae577501a7f169bff549eb397d32fbc913f0ebf9b69d961cab8c2fddb19d9a75143baa3073874879fec8197a1cf3d18ba06231ebcbb6640be47c12dd14220bf9
- SSDEEP 12288:ulbv2Gkfms2LQ0K47+4kuenNDjNXlq9RsYon7nWbgIFwgvIMg8+Jl7mUbYalBSy:ulL2Gkfms2L447+Nblq9Rxbg1gG8e7zh
- TLSH T122F4388663EC42E4F1F7AB3899724146DB72BC524B75C2CF0254166E1E73AD18D3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.