General
- Target 2026-08-03_e27f1051a0eabfc76190704ea923f8e5_cobalt-strike_icedid_njrat_remcos
- Size 3.6MB
- Sample260803-cjzbwaag46
- SHA256 6ef843caf40c020f3b195d5db61e320d00c9fa316970dc70b4a6022c8cc89da8
- MD5 e27f1051a0eabfc76190704ea923f8e5
- SHA1 cd0004eb92dddd0d4cd05ec998c8e18416c37343
- SHA512 351def2e9968dcf28e1a22439f84b15430163e605a7d3832c7ce44313948624fd465e6f244bbc624824d5db288f97cd3b7df14d1cfb5bf272af6d9f754432c81
- SSDEEP 49152:WLVfv7UpHn+XBttXs+Rs/DV7ShS7sqD0PJRTUNSwwkiPj5t/LKTHy6AqkIAb03kf:s78DNYhUY6YfKTS6lYY3k
- TLSH T1EB06F101A69502B9D067C138C2C70A1BE761708B676A9EEF06C159522F63FF25F7E36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e27f1051a0eabfc76190704ea923f8e5_cobalt-strike_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e27f1051a0eabfc76190704ea923f8e5_cobalt-strike_icedid_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e27f1051a0eabfc76190704ea923f8e5_cobalt-strike_icedid_njrat_remcos
- Size 3.6MB
- SHA256 6ef843caf40c020f3b195d5db61e320d00c9fa316970dc70b4a6022c8cc89da8
- MD5 e27f1051a0eabfc76190704ea923f8e5
- SHA1 cd0004eb92dddd0d4cd05ec998c8e18416c37343
- SHA512 351def2e9968dcf28e1a22439f84b15430163e605a7d3832c7ce44313948624fd465e6f244bbc624824d5db288f97cd3b7df14d1cfb5bf272af6d9f754432c81
- SSDEEP 49152:WLVfv7UpHn+XBttXs+Rs/DV7ShS7sqD0PJRTUNSwwkiPj5t/LKTHy6AqkIAb03kf:s78DNYhUY6YfKTS6lYY3k
- TLSH T1EB06F101A69502B9D067C138C2C70A1BE761708B676A9EEF06C159522F63FF25F7E36C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext