General
- Target 2026-08-08_535b873a6b1112bb0367ce72ff52bfb7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- Sample260808-d5rdtszame
- SHA256 e9eddf66ec0f89a4e16ff165028caa1e85e7b50945c9f0cc2ed774d37d5c6109
- MD5 535b873a6b1112bb0367ce72ff52bfb7
- SHA1 1ec209c22f4099c85517b785ef9be136e2a89b37
- SHA512 35d44e89304c239d4a4e252a414fb826383e0e4f32abc1087baa50475411c6ae784c89c08e713bece68ef9765fbc21348577106622a2e4547e7cb52422b03d86
- SSDEEP 12288:z429ioUzAqPLirjJAdGyvDF1QjwO2Jnadsw9aOGSW9IORAOe4DE10Z0xRCf0ANM4:koKDivJ+RvzYNSiQ8slqElZBnW4
- TLSH T17725F129F3641CF8FC26E17CCA665511E972F8150760E6EB1394A6262F732D05E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_535b873a6b1112bb0367ce72ff52bfb7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_535b873a6b1112bb0367ce72ff52bfb7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- SHA256 e9eddf66ec0f89a4e16ff165028caa1e85e7b50945c9f0cc2ed774d37d5c6109
- MD5 535b873a6b1112bb0367ce72ff52bfb7
- SHA1 1ec209c22f4099c85517b785ef9be136e2a89b37
- SHA512 35d44e89304c239d4a4e252a414fb826383e0e4f32abc1087baa50475411c6ae784c89c08e713bece68ef9765fbc21348577106622a2e4547e7cb52422b03d86
- SSDEEP 12288:z429ioUzAqPLirjJAdGyvDF1QjwO2Jnadsw9aOGSW9IORAOe4DE10Z0xRCf0ANM4:koKDivJ+RvzYNSiQ8slqElZBnW4
- TLSH T17725F129F3641CF8FC26E17CCA665511E972F8150760E6EB1394A6262F732D05E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1