General
- Target 2026-08-18_d4f7d50c7533907b6553137834ce7b9a_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- Sample260818-ypeejs1shz
- SHA256 1b5e02e3553bf5159c4def780832e5ca2675c4f40a1bc3d9fb192b97030ec2d1
- MD5 d4f7d50c7533907b6553137834ce7b9a
- SHA1 243f45728df4a6555a992f568a4ac78b47a08aab
- SHA512 4484825d788f0f3f1fc88fe2189ed58306944cc712f7afde9556f882a5af95f3920508b5229b5c00a476cbbec5a5f06fafee364a684401e358f93b3b3b70d16b
- SSDEEP 24576:PQvcivJ+Ro1Wq1kM82OmBu8wIPAZRFw85hHD:oUTeWaQ2cJIPAl9XHD
- TLSH T11C25F126F3A40DF8FC2AD17C8DA64811E671F8654360E6DB43A492252F736E05E3FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_d4f7d50c7533907b6553137834ce7b9a_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_d4f7d50c7533907b6553137834ce7b9a_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 969KB
- SHA256 1b5e02e3553bf5159c4def780832e5ca2675c4f40a1bc3d9fb192b97030ec2d1
- MD5 d4f7d50c7533907b6553137834ce7b9a
- SHA1 243f45728df4a6555a992f568a4ac78b47a08aab
- SHA512 4484825d788f0f3f1fc88fe2189ed58306944cc712f7afde9556f882a5af95f3920508b5229b5c00a476cbbec5a5f06fafee364a684401e358f93b3b3b70d16b
- SSDEEP 24576:PQvcivJ+Ro1Wq1kM82OmBu8wIPAZRFw85hHD:oUTeWaQ2cJIPAl9XHD
- TLSH T11C25F126F3A40DF8FC2AD17C8DA64811E671F8654360E6DB43A492252F736E05E3FB15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1