General
- Target 2026-08-03_143e93a7a6d9ae7f9bf27501e78112bb_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- Sample260804-p8nynabc68
- SHA256 045f408055abfb3e9518dc735946fbf580087d50f20f4cc1456be8b93f84b993
- MD5 143e93a7a6d9ae7f9bf27501e78112bb
- SHA1 166c34e7bec7ad173f76c600fbfb20b29902e6b9
- SHA512 8889ba59d12f2ab05b183c149ee8331290d38300ab7b9fa586a68f8b2df8808fba1ef27836c32a173a79a46c15fde2e7080828fc69001a97c08e9328791c4eda
- SSDEEP 12288:p429yHOzSGnBlMjJAdGylTghfNyhmtyu1TmWXwwhQyjMoMyshchv+t0cNBKnh2Of:yH0fluJ+Ryyh67TbhQyOhcJ+dmHqxgj
- TLSH T12025F129F3A019F8EC2BE17CCA629512D672F4254760E6EF135496253F732E05E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_143e93a7a6d9ae7f9bf27501e78112bb_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_143e93a7a6d9ae7f9bf27501e78112bb_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- SHA256 045f408055abfb3e9518dc735946fbf580087d50f20f4cc1456be8b93f84b993
- MD5 143e93a7a6d9ae7f9bf27501e78112bb
- SHA1 166c34e7bec7ad173f76c600fbfb20b29902e6b9
- SHA512 8889ba59d12f2ab05b183c149ee8331290d38300ab7b9fa586a68f8b2df8808fba1ef27836c32a173a79a46c15fde2e7080828fc69001a97c08e9328791c4eda
- SSDEEP 12288:p429yHOzSGnBlMjJAdGylTghfNyhmtyu1TmWXwwhQyjMoMyshchv+t0cNBKnh2Of:yH0fluJ+Ryyh67TbhQyOhcJ+dmHqxgj
- TLSH T12025F129F3A019F8EC2BE17CCA629512D672F4254760E6EF135496253F732E05E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1