General
- Target 2026-08-18_2768a97aa72add217c911ec1858fad72_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260818-merfkshm5v
- SHA256 1c969e89c305334cacaff1d73e1e4ff5b7c4f80daeb11aaae3e8443d05c374d5
- MD5 2768a97aa72add217c911ec1858fad72
- SHA1 85e617cb3bc3ce203b489144ff8d51d06ebcf537
- SHA512 cd1d0d73c924ac6e6b44ed00c7c0c4f6426a4aa598a37ebf3e038e050707d0a4dd7c21e7c9d195f3a787314022a315ddb55e5648b444e1934564ba28557d506a
- SSDEEP 12288:nRd68xkPIgChb3K8ZtpB9nMNDj+Us931YonXnWrXwAwvXTMg8+Jl7mUbYaZKw:nR48xkPIgChu8Zt39srX6vR8e7zY2
- TLSH T168F4284663EC02E4F2F3AB3899724556DBB2BC514B35C2CF0254566E1E73AD18D3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_2768a97aa72add217c911ec1858fad72_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_2768a97aa72add217c911ec1858fad72_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_2768a97aa72add217c911ec1858fad72_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 1c969e89c305334cacaff1d73e1e4ff5b7c4f80daeb11aaae3e8443d05c374d5
- MD5 2768a97aa72add217c911ec1858fad72
- SHA1 85e617cb3bc3ce203b489144ff8d51d06ebcf537
- SHA512 cd1d0d73c924ac6e6b44ed00c7c0c4f6426a4aa598a37ebf3e038e050707d0a4dd7c21e7c9d195f3a787314022a315ddb55e5648b444e1934564ba28557d506a
- SSDEEP 12288:nRd68xkPIgChb3K8ZtpB9nMNDj+Us931YonXnWrXwAwvXTMg8+Jl7mUbYaZKw:nR48xkPIgChu8Zt39srX6vR8e7zY2
- TLSH T168F4284663EC02E4F2F3AB3899724556DBB2BC514B35C2CF0254566E1E73AD18D3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.