General
- Target 2026-08-03_970ed089fa0381448e6001f4ea9e123d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- Sample260804-msfk8sxhrg
- SHA256 07f3f67762e3a83e906c74c50cb6f9318207062ef2126d733d0a45c0ad7a6e8f
- MD5 970ed089fa0381448e6001f4ea9e123d
- SHA1 21de24a35157b18a86e244fc557622f55aa0a76e
- SHA512 76bbe982e69bd63e725f37d7421b4168007a04d1188fde632729a9e76fdc958c97df03d7d81f272a72cef328b70326a313444210afc9a95e48580ceea71fb9a1
- SSDEEP 24576:wMycivJ+RPV9F3c8OmAyAhgAQiE6E6bMY0C:r1TPy8OOAhgAQRX6OC
- TLSH T13925F119B3A01DF8FC2BD27CC9668511D972F8160760EAEB1395D6262F732D01E3BB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_970ed089fa0381448e6001f4ea9e123d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_970ed089fa0381448e6001f4ea9e123d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- SHA256 07f3f67762e3a83e906c74c50cb6f9318207062ef2126d733d0a45c0ad7a6e8f
- MD5 970ed089fa0381448e6001f4ea9e123d
- SHA1 21de24a35157b18a86e244fc557622f55aa0a76e
- SHA512 76bbe982e69bd63e725f37d7421b4168007a04d1188fde632729a9e76fdc958c97df03d7d81f272a72cef328b70326a313444210afc9a95e48580ceea71fb9a1
- SSDEEP 24576:wMycivJ+RPV9F3c8OmAyAhgAQiE6E6bMY0C:r1TPy8OOAhgAQRX6OC
- TLSH T13925F119B3A01DF8FC2BD27CC9668511D972F8160760EAEB1395D6262F732D01E3BB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1