General
- Target 2026-08-12_cf132f401f31f258f714f5400ba68bd6_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260812-mshqlavcrh
- SHA256 6cf4f0af38be58806371ce527dc42a89d277d2a2675c9af8139f327552806c41
- MD5 cf132f401f31f258f714f5400ba68bd6
- SHA1 10ebf2d1c7cad29915d1bce0cc9c32f1131dafbd
- SHA512 1ced661f214b494cb9c26feab8236be43beb8e52ed991c1e9b0de2d2531253129d982003ca9c7a64d0af75ed5b18a8df7e4862204e253c0f07f683e277b50d7e
- SSDEEP 12288:bi6Mz7k4Mg2IOacHA4WKzNBSDjtgs9nZYon3nWTtMIw82UMg8+Jl7mUbYaDpq//X:bidz7k4Mg2IGHA4FywTtG8p8e7zYSKX
- TLSH T1F7F4384663EC42E4F1F7AB389972414ADB72BC524B35C28F0254566E1E73AD18D3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_cf132f401f31f258f714f5400ba68bd6_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_cf132f401f31f258f714f5400ba68bd6_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_cf132f401f31f258f714f5400ba68bd6_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 6cf4f0af38be58806371ce527dc42a89d277d2a2675c9af8139f327552806c41
- MD5 cf132f401f31f258f714f5400ba68bd6
- SHA1 10ebf2d1c7cad29915d1bce0cc9c32f1131dafbd
- SHA512 1ced661f214b494cb9c26feab8236be43beb8e52ed991c1e9b0de2d2531253129d982003ca9c7a64d0af75ed5b18a8df7e4862204e253c0f07f683e277b50d7e
- SSDEEP 12288:bi6Mz7k4Mg2IOacHA4WKzNBSDjtgs9nZYon3nWTtMIw82UMg8+Jl7mUbYaDpq//X:bidz7k4Mg2IGHA4FywTtG8p8e7zYSKX
- TLSH T1F7F4384663EC42E4F1F7AB389972414ADB72BC524B35C28F0254566E1E73AD18D3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.