General
- Target 2026-08-17_c7e74b363a3323d5192d0e702ca1b1a1_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- Sample260817-ptvsna1wax
- SHA256 c21f0ab6cee3fb685e6703d0e91404022ab072708c551958643c7319b4d55eb2
- MD5 c7e74b363a3323d5192d0e702ca1b1a1
- SHA1 9cb1799379e06693ae70a5c8635e9c0d79790ca0
- SHA512 542249636fb34bdfe0bddf639b37413c02eb95193b54d9bcb656c5c66db0765b9e56507c0e83ec815a1566ae296a345eb5f117c4c3c5797f8ab07edcc7f2d588
- SSDEEP 12288:JGU8DNxiffMHvT96Z/jlqrX4WtQiLAhezSprNLGP:JG5i3RZ7lqbFtQiLnzSprNLe
- TLSH T1A3C49E55A7E400B9E1F7E678C9A74902E77B7C0606B1DB4F03E881772F672509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_c7e74b363a3323d5192d0e702ca1b1a1_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_c7e74b363a3323d5192d0e702ca1b1a1_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c7e74b363a3323d5192d0e702ca1b1a1_cobalt-strike_hijackloader_icedid_njrat
- Size 561KB
- SHA256 c21f0ab6cee3fb685e6703d0e91404022ab072708c551958643c7319b4d55eb2
- MD5 c7e74b363a3323d5192d0e702ca1b1a1
- SHA1 9cb1799379e06693ae70a5c8635e9c0d79790ca0
- SHA512 542249636fb34bdfe0bddf639b37413c02eb95193b54d9bcb656c5c66db0765b9e56507c0e83ec815a1566ae296a345eb5f117c4c3c5797f8ab07edcc7f2d588
- SSDEEP 12288:JGU8DNxiffMHvT96Z/jlqrX4WtQiLAhezSprNLGP:JG5i3RZ7lqbFtQiLnzSprNLe
- TLSH T1A3C49E55A7E400B9E1F7E678C9A74902E77B7C0606B1DB4F03E881772F672509E39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.