General
- Target 2026-08-08_3dc0a63452fd38e8136fb94e7d39ca61_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- Sample260808-ebl3pahk3z
- SHA256 2549f514d8b345196700ba0526fd7374c801ff103104a18a2d3fa42a76f40af2
- MD5 3dc0a63452fd38e8136fb94e7d39ca61
- SHA1 57e6415d204c036510b5de512dbb79a2d48208ee
- SHA512 c4890fb005b69f8d0aa5511029ae0ba87a526320697ac1c323367e21513d697e3096b2af499ba8fe63d8d114406fd3df69d65596c76219b7d95cc0f13c68d910
- SSDEEP 12288:q429CHJzcGzAirjJAdGy8OZHNLBTxSvaZMl3HrJJ6MqCTZKWbevCaQHpWKNsm0No:bH1civJ+R3pKhHrj1qCcWSRQHpSF+J
- TLSH T14B25F116F7A01DF9FC2BD23CCEA29512E972B8250360D6EF135496252E336D05A3FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_3dc0a63452fd38e8136fb94e7d39ca61_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_3dc0a63452fd38e8136fb94e7d39ca61_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_3dc0a63452fd38e8136fb94e7d39ca61_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- SHA256 2549f514d8b345196700ba0526fd7374c801ff103104a18a2d3fa42a76f40af2
- MD5 3dc0a63452fd38e8136fb94e7d39ca61
- SHA1 57e6415d204c036510b5de512dbb79a2d48208ee
- SHA512 c4890fb005b69f8d0aa5511029ae0ba87a526320697ac1c323367e21513d697e3096b2af499ba8fe63d8d114406fd3df69d65596c76219b7d95cc0f13c68d910
- SSDEEP 12288:q429CHJzcGzAirjJAdGy8OZHNLBTxSvaZMl3HrJJ6MqCTZKWbevCaQHpWKNsm0No:bH1civJ+R3pKhHrj1qCcWSRQHpSF+J
- TLSH T14B25F116F7A01DF9FC2BD23CCEA29512E972B8250360D6EF135496252E336D05A3FB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1