General
- Target 2026-08-18_1a6b2e1072fb7ab196fa481f8697e1ef_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- Sample260818-1debhssyd1
- SHA256 80ef1f5125dd95e0029075320a99a215cc848e7c4529d48d8d06c7e1af4b19c7
- MD5 1a6b2e1072fb7ab196fa481f8697e1ef
- SHA1 ffeea58b826b229bb994ac50c447dfe172d3c114
- SHA512 7f6bb2d3ac0cbaa59222ced1de8368ea6ed5d8236f8bc8c6fbefee81f0abb6b25204975e01f8d77b3a9a20da6bebbd3443cfc0315b285847dd2995482b07f2d5
- SSDEEP 24576:typ29uK3zNf0lmRXrz8Upy7Rqm4UHMp2yujcZ:sp2IKOEFH8sy7RqmV1ye
- TLSH T10805F12AB7A149F9DD77C27CC9E3C412E97178550360EE9B139496261E333C42E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_1a6b2e1072fb7ab196fa481f8697e1ef_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_1a6b2e1072fb7ab196fa481f8697e1ef_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- SHA256 80ef1f5125dd95e0029075320a99a215cc848e7c4529d48d8d06c7e1af4b19c7
- MD5 1a6b2e1072fb7ab196fa481f8697e1ef
- SHA1 ffeea58b826b229bb994ac50c447dfe172d3c114
- SHA512 7f6bb2d3ac0cbaa59222ced1de8368ea6ed5d8236f8bc8c6fbefee81f0abb6b25204975e01f8d77b3a9a20da6bebbd3443cfc0315b285847dd2995482b07f2d5
- SSDEEP 24576:typ29uK3zNf0lmRXrz8Upy7Rqm4UHMp2yujcZ:sp2IKOEFH8sy7RqmV1ye
- TLSH T10805F12AB7A149F9DD77C27CC9E3C412E97178550360EE9B139496261E333C42E3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1