General
- Target 2026-08-08_950208129d017b03ea76fc4f3437dfb0_cobalt-strike_hijackloader_icedid_njrat_vidar
- Size 574KB
- Sample260808-2n5f5awbla
- SHA256 6c614adddf97b2e44fda648e86fb26c1a8d47579ab0dc514a92594e236c96278
- MD5 950208129d017b03ea76fc4f3437dfb0
- SHA1 a7af069cb314f94f26e38631ed368c1d5546eb52
- SHA512 16ad99d556d3fada8868978c46baa8a39594f7d29d2a7da126ebf05c6186396b8a8f4fec0d986a9f73925979d4f14d41fca423ac13672d65241eb58a4cae2e11
- SSDEEP 6144:HTJ4fjVARc63B8zXThNi+JA+QcBPkR4c/cOTQ44XJKe7oV75rz:mfpARck8nhNJAEB8R4Qc+z
- TLSH T104C4A0037E9408A5D86A727DB852F4F597616C330BDF85CA12633F1ABA32FB14B25631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_950208129d017b03ea76fc4f3437dfb0_cobalt-strike_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_950208129d017b03ea76fc4f3437dfb0_cobalt-strike_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_950208129d017b03ea76fc4f3437dfb0_cobalt-strike_hijackloader_icedid_njrat_vidar
- Size 574KB
- SHA256 6c614adddf97b2e44fda648e86fb26c1a8d47579ab0dc514a92594e236c96278
- MD5 950208129d017b03ea76fc4f3437dfb0
- SHA1 a7af069cb314f94f26e38631ed368c1d5546eb52
- SHA512 16ad99d556d3fada8868978c46baa8a39594f7d29d2a7da126ebf05c6186396b8a8f4fec0d986a9f73925979d4f14d41fca423ac13672d65241eb58a4cae2e11
- SSDEEP 6144:HTJ4fjVARc63B8zXThNi+JA+QcBPkR4c/cOTQ44XJKe7oV75rz:mfpARck8nhNJAEB8R4Qc+z
- TLSH T104C4A0037E9408A5D86A727DB852F4F597616C330BDF85CA12633F1ABA32FB14B25631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.