General
- Target 2026-08-17_28d0ab39e179235451b0872004a1b079_cobalt-strike_ghostweaver_icedid_lockbit_vidar
- Size 376KB
- Sample260817-hd63esvene
- SHA256 b4a41a0b0a3da9424b1be0367cf53c0696995f5a1d344c4fdce800d42b4aee0c
- MD5 28d0ab39e179235451b0872004a1b079
- SHA1 e37933f7f216b67c3433e59e157591400ed0b05f
- SHA512 b5223f949c50c2521c07da0efcf12b0dfbe21eaed6585fabe7b3c892a71d1af726d08680b7ab6d94cb1cea713d9ea968019267bb8ae73837c06f4ea85a4ea0ee
- SSDEEP 6144:AHdhPDjUVFPeDADETZZX+t4Z0dS7jNt5z1GrxQol0XAD35m0ampO83rvdcp:AzDQL2iqjSeKQG5+YV
- TLSH T1E0848C1772E850FAD5668239C9A38A06FB73781607209B8F17A4477A1F237D1BD3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_28d0ab39e179235451b0872004a1b079_cobalt-strike_ghostweaver_icedid_lockbit_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_28d0ab39e179235451b0872004a1b079_cobalt-strike_ghostweaver_icedid_lockbit_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
110.42.106.225:6666
-
127.0.0.1:80
Attributes
-
campaign_date
2026. 8.14
Targets
-
- Target 2026-08-17_28d0ab39e179235451b0872004a1b079_cobalt-strike_ghostweaver_icedid_lockbit_vidar
- Size 376KB
- SHA256 b4a41a0b0a3da9424b1be0367cf53c0696995f5a1d344c4fdce800d42b4aee0c
- MD5 28d0ab39e179235451b0872004a1b079
- SHA1 e37933f7f216b67c3433e59e157591400ed0b05f
- SHA512 b5223f949c50c2521c07da0efcf12b0dfbe21eaed6585fabe7b3c892a71d1af726d08680b7ab6d94cb1cea713d9ea968019267bb8ae73837c06f4ea85a4ea0ee
- SSDEEP 6144:AHdhPDjUVFPeDADETZZX+t4Z0dS7jNt5z1GrxQol0XAD35m0ampO83rvdcp:AzDQL2iqjSeKQG5+YV
- TLSH T1E0848C1772E850FAD5668239C9A38A06FB73781607209B8F17A4477A1F237D1BD3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10