General
- Target 2026-08-16_9845e5cf93a5cd9917dad4fe7d729189_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- Sample260816-3clejsbq9z
- SHA256 123c8090fb5a22f337d1c4c3d353de43063e63b52569488ad29d106bc6dc2bcc
- MD5 9845e5cf93a5cd9917dad4fe7d729189
- SHA1 b56d77be0b6e6d183388251e0893f0816c7597d2
- SHA512 4cb9d17c4d2920a94769fa5b3a2c10ec18e76874504d3d4c6df54868bde283cba4ea146c5ff950f49dce43e5d13b12f5a8b61a414e8051a288f576ec26acfe4a
- SSDEEP 24576:kH0CiRJ+RaVDB3Jw8QkVO+GftQuksrqLsN:M1tahBCD/fxkAqy
- TLSH T17625F12AF3605DF8EC2BD17CC9629512EA72F8150760DAEB135496262F736D01A3FF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_9845e5cf93a5cd9917dad4fe7d729189_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_9845e5cf93a5cd9917dad4fe7d729189_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_9845e5cf93a5cd9917dad4fe7d729189_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- SHA256 123c8090fb5a22f337d1c4c3d353de43063e63b52569488ad29d106bc6dc2bcc
- MD5 9845e5cf93a5cd9917dad4fe7d729189
- SHA1 b56d77be0b6e6d183388251e0893f0816c7597d2
- SHA512 4cb9d17c4d2920a94769fa5b3a2c10ec18e76874504d3d4c6df54868bde283cba4ea146c5ff950f49dce43e5d13b12f5a8b61a414e8051a288f576ec26acfe4a
- SSDEEP 24576:kH0CiRJ+RaVDB3Jw8QkVO+GftQuksrqLsN:M1tahBCD/fxkAqy
- TLSH T17625F12AF3605DF8EC2BD17CC9629512EA72F8150760DAEB135496262F736D01A3FF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1