General
- Target 2026-08-18_a9f07cd25687fcc2690d3b976c57ebf7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260818-lypweshj3w
- SHA256 52008ae87c8432a457f0cd36cfd999a459fdcf059013f8ac8b96786542c04772
- MD5 a9f07cd25687fcc2690d3b976c57ebf7
- SHA1 1ee7e30ff5f295c8f087f0ba5c894f9c6e6331e4
- SHA512 116858b0d2f1fb00d07ae11fb2e1880f14176a40755a12d426a735166b01e4cba7372c841ccfd54bc19c714b1ede786c290e9dfbe9b10de3727bb2cb212509de
- SSDEEP 6144:Magncs9F+Z/bM61DgEXwglAHHJ7olgtlhnX3dZ9R2Im:vgncs9F+dAUcxh24lhnX3rP2Im
- TLSH T12F54AE29B3A009F9DC67C27CC9F28526EA7138660360EADF429485761F377C46E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_a9f07cd25687fcc2690d3b976c57ebf7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a9f07cd25687fcc2690d3b976c57ebf7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a9f07cd25687fcc2690d3b976c57ebf7_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 52008ae87c8432a457f0cd36cfd999a459fdcf059013f8ac8b96786542c04772
- MD5 a9f07cd25687fcc2690d3b976c57ebf7
- SHA1 1ee7e30ff5f295c8f087f0ba5c894f9c6e6331e4
- SHA512 116858b0d2f1fb00d07ae11fb2e1880f14176a40755a12d426a735166b01e4cba7372c841ccfd54bc19c714b1ede786c290e9dfbe9b10de3727bb2cb212509de
- SSDEEP 6144:Magncs9F+Z/bM61DgEXwglAHHJ7olgtlhnX3dZ9R2Im:vgncs9F+dAUcxh24lhnX3rP2Im
- TLSH T12F54AE29B3A009F9DC67C27CC9F28526EA7138660360EADF429485761F377C46E3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.