General
- Target 2026-08-03_fb65192d45d34461b45ecad360fd3010_cobalt-strike_icedid_njrat_remcos
- Size 3.6MB
- Sample260803-klkkhasara
- SHA256 3eddb1db58b61839911224137dca26a091785aaf8a9383455943d9b6ec5c6e91
- MD5 fb65192d45d34461b45ecad360fd3010
- SHA1 22d41b8f8ab7a57bf5f4dcc80620e00f5c775a9c
- SHA512 b9da62015072550466bc7a6d8ca64abeb13d4773a06db989e1452413d369819d84ca8b164a00d26172ac99d88f3bea36efc937441b103db83b4b10affdddf16e
- SSDEEP 49152:5Ptf57UpHn+XBttXwuzqGos6r45ZBWVOgqz+DHY1UPhjhf3e6mE2Jd828qra6OOD:57peGoC/MQaDHY6Df4IwOOJvQ
- TLSH T1AA06F111A68512B9C06BC178C2CB0A1FE761704A5766DEDF06C159523FA3EF25B3E32E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_fb65192d45d34461b45ecad360fd3010_cobalt-strike_icedid_njrat_remcos.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_fb65192d45d34461b45ecad360fd3010_cobalt-strike_icedid_njrat_remcos.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_fb65192d45d34461b45ecad360fd3010_cobalt-strike_icedid_njrat_remcos
- Size 3.6MB
- SHA256 3eddb1db58b61839911224137dca26a091785aaf8a9383455943d9b6ec5c6e91
- MD5 fb65192d45d34461b45ecad360fd3010
- SHA1 22d41b8f8ab7a57bf5f4dcc80620e00f5c775a9c
- SHA512 b9da62015072550466bc7a6d8ca64abeb13d4773a06db989e1452413d369819d84ca8b164a00d26172ac99d88f3bea36efc937441b103db83b4b10affdddf16e
- SSDEEP 49152:5Ptf57UpHn+XBttXwuzqGos6r45ZBWVOgqz+DHY1UPhjhf3e6mE2Jd828qra6OOD:57peGoC/MQaDHY6Df4IwOOJvQ
- TLSH T1AA06F111A68512B9C06BC178C2CB0A1FE761704A5766DEDF06C159523FA3EF25B3E32E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Stops running service(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext