General
- Target 2026-08-03_e97f84d0d2fe74a638e5a31aaf1fec25_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- Sample260803-ch5ghawelc
- SHA256 021f3a7731bdbe8cdd2a0abc7ce700d675a4d69c31e78df4a1c4c0a185a47cc3
- MD5 e97f84d0d2fe74a638e5a31aaf1fec25
- SHA1 815be8e249a707125480d820081ddf80fcba66ca
- SHA512 9c4819aaf5ad921fdefef489f644b6ff348ae14d221f89fa16fe24fb4a05e1f942482ed8e87ca8551dd9fbec3dad9dea04e1420959fd6efc2113c1aa42558e7f
- SSDEEP 12288:9z8TXmaoFqwbG4Di/Ss9j99t0cbAhezSpXC2He:9na2jiP9t0cbnzSpX3e
- TLSH T10AC48D55A7E500B9E1B7E678C8A75902E77B7C0606B0DB8F02E8C1772F672509E39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e97f84d0d2fe74a638e5a31aaf1fec25_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e97f84d0d2fe74a638e5a31aaf1fec25_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e97f84d0d2fe74a638e5a31aaf1fec25_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- SHA256 021f3a7731bdbe8cdd2a0abc7ce700d675a4d69c31e78df4a1c4c0a185a47cc3
- MD5 e97f84d0d2fe74a638e5a31aaf1fec25
- SHA1 815be8e249a707125480d820081ddf80fcba66ca
- SHA512 9c4819aaf5ad921fdefef489f644b6ff348ae14d221f89fa16fe24fb4a05e1f942482ed8e87ca8551dd9fbec3dad9dea04e1420959fd6efc2113c1aa42558e7f
- SSDEEP 12288:9z8TXmaoFqwbG4Di/Ss9j99t0cbAhezSpXC2He:9na2jiP9t0cbnzSpX3e
- TLSH T10AC48D55A7E500B9E1B7E678C8A75902E77B7C0606B0DB8F02E8C1772F672509E39B31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.