General
- Target 2026-08-10_17a4497ca2ef4e93ead95c69e6a644a4_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- Sample260810-pmgbpaga94
- SHA256 a239928d0068dec9e50b80f0e4abd05c01b8ede08ef6c4a3edfcc57f9cb8e117
- MD5 17a4497ca2ef4e93ead95c69e6a644a4
- SHA1 52a9050b3bd1c8c405d79cda691d0494632faa83
- SHA512 3947cc25141b44635b850ae5cf61fd49c67b56c490e3faa22c183d3d08ba9f61b1caa5493ed3cfba265e68fa8e9594497fd503f6adf0ee5a7f65766cec196e16
- SSDEEP 12288:yA8r8rzayUYPQLbT/OlqbbKtBSbAhezSpFYvz5hP30kkya:y6z7gTWlqXKtBSbnzSpOb5hP3y
- TLSH T125C48E45A7E900B9F1B7D678C8A35A06E77B7C0606B0DB8F03E885771F636509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_17a4497ca2ef4e93ead95c69e6a644a4_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_17a4497ca2ef4e93ead95c69e6a644a4_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_17a4497ca2ef4e93ead95c69e6a644a4_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- SHA256 a239928d0068dec9e50b80f0e4abd05c01b8ede08ef6c4a3edfcc57f9cb8e117
- MD5 17a4497ca2ef4e93ead95c69e6a644a4
- SHA1 52a9050b3bd1c8c405d79cda691d0494632faa83
- SHA512 3947cc25141b44635b850ae5cf61fd49c67b56c490e3faa22c183d3d08ba9f61b1caa5493ed3cfba265e68fa8e9594497fd503f6adf0ee5a7f65766cec196e16
- SSDEEP 12288:yA8r8rzayUYPQLbT/OlqbbKtBSbAhezSpFYvz5hP30kkya:y6z7gTWlqXKtBSbnzSpOb5hP3y
- TLSH T125C48E45A7E900B9F1B7D678C8A35A06E77B7C0606B0DB8F03E885771F636509E39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.