General
- Target 2026-08-10_7f18e6def6b9aad24d91020a7b124736_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- Sample260810-tr7rnasfrf
- SHA256 844886c93a762ea51e7dc4955586663bbae354fd044e9e487f48010243a27647
- MD5 7f18e6def6b9aad24d91020a7b124736
- SHA1 d2ce3131a4604f025922af174590f4a0994b24fd
- SHA512 6a4a67a974c3f0be0a58edd87e0aae3d5c9ec6bf112cae55f9ebce078a0b717230457a11a6367f122b197253a981d90e4ea555495a3b79f2664568eb63ae8301
- SSDEEP 12288:tyvT6GRMZ29UDWEusJngKsQERMMB3d0zamvyu+xgcUOq4fmizM7V:7xZ29yHJgKsTj522mvmtUOq4f+7
- TLSH T16E05F139A79409F8DC27C27CCDE39516E67238650311EE9F23A086261E236D56F3EF91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_7f18e6def6b9aad24d91020a7b124736_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_7f18e6def6b9aad24d91020a7b124736_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- SHA256 844886c93a762ea51e7dc4955586663bbae354fd044e9e487f48010243a27647
- MD5 7f18e6def6b9aad24d91020a7b124736
- SHA1 d2ce3131a4604f025922af174590f4a0994b24fd
- SHA512 6a4a67a974c3f0be0a58edd87e0aae3d5c9ec6bf112cae55f9ebce078a0b717230457a11a6367f122b197253a981d90e4ea555495a3b79f2664568eb63ae8301
- SSDEEP 12288:tyvT6GRMZ29UDWEusJngKsQERMMB3d0zamvyu+xgcUOq4fmizM7V:7xZ29yHJgKsTj522mvmtUOq4f+7
- TLSH T16E05F139A79409F8DC27C27CCDE39516E67238650311EE9F23A086261E236D56F3EF91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1