General
- Target 2026-08-13_346f48e6b2bef4e5a63a50de9ea6c03d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- Sample260813-qp8pdsbc44
- SHA256 e38ac04da2605f8bf4417cdc9bd7769b10aacb868f84561577b38a0ca7562a88
- MD5 346f48e6b2bef4e5a63a50de9ea6c03d
- SHA1 4ebc460e980d1fc6ff36465da2b6cc030af0234f
- SHA512 6f737bd6e7cecb262f434ef4cc5db9270f743669fca68ed10d30cc43819aa1cb38d9a2b14bf391e630486176c2c450c0f08ee9148bd6c0e28eb8590ad78dd4a0
- SSDEEP 6144:hL54h2n7ElxgoZBqk5+wI2RA66LfJBNFwjaJg3PfcKrKywb2PWXjcLY5nZqyL5:z4h2Qlq6tUSzGdJAdGykxAy5
- TLSH T1F5A4BE25F3601DF8FC3BE5BCC9A29411AA72B8154790E7EB1190D2262F732D05A3FB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_346f48e6b2bef4e5a63a50de9ea6c03d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_346f48e6b2bef4e5a63a50de9ea6c03d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_346f48e6b2bef4e5a63a50de9ea6c03d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- SHA256 e38ac04da2605f8bf4417cdc9bd7769b10aacb868f84561577b38a0ca7562a88
- MD5 346f48e6b2bef4e5a63a50de9ea6c03d
- SHA1 4ebc460e980d1fc6ff36465da2b6cc030af0234f
- SHA512 6f737bd6e7cecb262f434ef4cc5db9270f743669fca68ed10d30cc43819aa1cb38d9a2b14bf391e630486176c2c450c0f08ee9148bd6c0e28eb8590ad78dd4a0
- SSDEEP 6144:hL54h2n7ElxgoZBqk5+wI2RA66LfJBNFwjaJg3PfcKrKywb2PWXjcLY5nZqyL5:z4h2Qlq6tUSzGdJAdGykxAy5
- TLSH T1F5A4BE25F3601DF8FC3BE5BCC9A29411AA72B8154790E7EB1190D2262F732D05A3FB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.