General
- Target 2026-08-19_51a6fc83aea88b63f3080d1ce1e43795_cobalt-strike_icedid_njrat_vidar
- Size 3.6MB
- Sample260819-2vet2svfld
- SHA256 b7ce5eb4ef0e0286f04e5919de2b31161dd3950f160bca5b78009f93d39bf070
- MD5 51a6fc83aea88b63f3080d1ce1e43795
- SHA1 d2fe737548d68322ceb5d2fe52f02a81a0cf094a
- SHA512 a7c1baf27e1ff5266902c412225ee0883a3c06213139325e008ee032f2f320a2602803bfda398c194e82fb1393059d170a8b493d1b2e7a642f7c19e4bd7012f3
- SSDEEP 49152:LPxROIMNYm+x72JWfR83BFJjG/CScvcaI9ivy7i20f1j8yQLNiXicJFFRGNzj3:DxROIYeyWfRiBfBIVSfJs7wRGpj3
- TLSH T17C06AF5B72AD01E8E077D17DCA465A06F7B278054732A7CB12F486AA1F27BE14E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_51a6fc83aea88b63f3080d1ce1e43795_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_51a6fc83aea88b63f3080d1ce1e43795_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_51a6fc83aea88b63f3080d1ce1e43795_cobalt-strike_icedid_njrat_vidar
- Size 3.6MB
- SHA256 b7ce5eb4ef0e0286f04e5919de2b31161dd3950f160bca5b78009f93d39bf070
- MD5 51a6fc83aea88b63f3080d1ce1e43795
- SHA1 d2fe737548d68322ceb5d2fe52f02a81a0cf094a
- SHA512 a7c1baf27e1ff5266902c412225ee0883a3c06213139325e008ee032f2f320a2602803bfda398c194e82fb1393059d170a8b493d1b2e7a642f7c19e4bd7012f3
- SSDEEP 49152:LPxROIMNYm+x72JWfR83BFJjG/CScvcaI9ivy7i20f1j8yQLNiXicJFFRGNzj3:DxROIYeyWfRiBfBIVSfJs7wRGpj3
- TLSH T17C06AF5B72AD01E8E077D17DCA465A06F7B278054732A7CB12F486AA1F27BE14E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops file in System32 directory