General
- Target 2026-08-03_4cd063e2c4089f9577fafb57c3a91333_cobalt-strike_icedid_njrat_remcos
- Size 3.6MB
- Sample260803-k9md1ashrh
- SHA256 92a6a133e1526c2a8d0f99a92ffea3edda0792a7e66ba797357c7e49498c9041
- MD5 4cd063e2c4089f9577fafb57c3a91333
- SHA1 6c66119c449418c849aeeb417e4ff4f295889fc3
- SHA512 34f065094ef1e9f04a3bc90197bb2c3ff1903055d8657784d89d1b336292c278330afcef8d57842d07961649fe606c2211ddfe7e0d7e76be864b6c100b09d323
- SSDEEP 49152:mvfT7UpHn+XBttXSRsp6ijZN8Bjo4dYIcZWHEkuGs4+tMBvrjyMZW2YcbtGkV4mS:M73tU3dYuEldWvr212YcpGc
- TLSH T1F206F115A6C512B9D06BC138C2CB064BE761708A676A8EDF06C159422F63FF25F3E36D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_4cd063e2c4089f9577fafb57c3a91333_cobalt-strike_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4cd063e2c4089f9577fafb57c3a91333_cobalt-strike_icedid_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_4cd063e2c4089f9577fafb57c3a91333_cobalt-strike_icedid_njrat_remcos
- Size 3.6MB
- SHA256 92a6a133e1526c2a8d0f99a92ffea3edda0792a7e66ba797357c7e49498c9041
- MD5 4cd063e2c4089f9577fafb57c3a91333
- SHA1 6c66119c449418c849aeeb417e4ff4f295889fc3
- SHA512 34f065094ef1e9f04a3bc90197bb2c3ff1903055d8657784d89d1b336292c278330afcef8d57842d07961649fe606c2211ddfe7e0d7e76be864b6c100b09d323
- SSDEEP 49152:mvfT7UpHn+XBttXSRsp6ijZN8Bjo4dYIcZWHEkuGs4+tMBvrjyMZW2YcbtGkV4mS:M73tU3dYuEldWvr212YcpGc
- TLSH T1F206F115A6C512B9D06BC138C2CB064BE761708A676A8EDF06C159422F63FF25F3E36D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext