General
- Target 2026-08-03_2adc4d2b6bfc8c4bb018de7bcba8577f_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260803-sbc2nstvby
- SHA256 4aa55d7c6e4bec35ae5ec1e061e2901ef0627bf692cab703c4918a157fe1c32d
- MD5 2adc4d2b6bfc8c4bb018de7bcba8577f
- SHA1 1463c287d378706344ab0202d072e147d743a178
- SHA512 e24d1db63682733009fab6563a53389bb66286f1fef77aed8ac531345236f563ae80c4f84257cb7bcc91ab727364b35b1b362ae3900b4e4fced27bacc4e8f606
- SSDEEP 6144:39qg9Zws9R2y4MKdDDaIfwb54KJ7olgtlhnoHs/6nq:Nn9Zws9R/58/FE24lhn4e6q
- TLSH T14454AE79B7900CF9EC67C37DC8B28425EA3278550360DADF52A486651F237C46E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_2adc4d2b6bfc8c4bb018de7bcba8577f_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_2adc4d2b6bfc8c4bb018de7bcba8577f_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_2adc4d2b6bfc8c4bb018de7bcba8577f_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 4aa55d7c6e4bec35ae5ec1e061e2901ef0627bf692cab703c4918a157fe1c32d
- MD5 2adc4d2b6bfc8c4bb018de7bcba8577f
- SHA1 1463c287d378706344ab0202d072e147d743a178
- SHA512 e24d1db63682733009fab6563a53389bb66286f1fef77aed8ac531345236f563ae80c4f84257cb7bcc91ab727364b35b1b362ae3900b4e4fced27bacc4e8f606
- SSDEEP 6144:39qg9Zws9R2y4MKdDDaIfwb54KJ7olgtlhnoHs/6nq:Nn9Zws9R/58/FE24lhn4e6q
- TLSH T14454AE79B7900CF9EC67C37DC8B28425EA3278550360DADF52A486651F237C46E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.