deb94e74efd3159d4c30ba8c790dbfc3ec51bdab46fb904434d2ec06524250a3

User tags

Assigned on submission by the user, not by sandbox detections.

experiment:claude-opus-4.6 profile:5bc3155e4da2b85364b79a5e sha256:deb94e74efd3159d4c30ba8c790dbfc3ec51bdab46fb904434d2ec06524250a3 modes:score-features

Sharing

Copy URL Twitter E-mail

General

Target
2026-01-16_375560f60225d5f93cdc53bcba38c2cb_cobalt-strike_hijackloader_icedid_njrat_vidar.exe
Size 275KB
Sample260819-yn6seahd59
SHA256 deb94e74efd3159d4c30ba8c790dbfc3ec51bdab46fb904434d2ec06524250a3
MD5 c0c25b7de5f7bb89ddf6388160012b78
SHA1 b5275c6bba1e83cca32188b2eddbbec07d2ea2f7
SHA512 885666a4698017fe3511fb630b8fe0caf908ce9ff66296ec71a7ef46cd259bca370d8895ca43c01368cb40f2cd04a1d6566e444e94e150dd65875bafdd199b11
SSDEEP 6144:NEkHZs9xFNVNJYabwVsLSUaH5zqYunYPMvo:NNHZs9xFNVNWabw+WUOzqOPMvo
TLSH
T1CD549EA5B3901CF8ED67813ECD554906D6B27C5A0B60C65F03B8366A5F333A11C3EBA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  2026-01-16_375560f60225d5f93cdc53bcba38c2cb_cobalt-strike_hijackloader_icedid_njrat_vidar.exe
- Size 275KB
- SHA256 deb94e74efd3159d4c30ba8c790dbfc3ec51bdab46fb904434d2ec06524250a3
- MD5 c0c25b7de5f7bb89ddf6388160012b78
- SHA1 b5275c6bba1e83cca32188b2eddbbec07d2ea2f7
- SHA512 885666a4698017fe3511fb630b8fe0caf908ce9ff66296ec71a7ef46cd259bca370d8895ca43c01368cb40f2cd04a1d6566e444e94e150dd65875bafdd199b11
- SSDEEP 6144:NEkHZs9xFNVNJYabwVsLSUaH5zqYunYPMvo:NNHZs9xFNVNWabw+WUOzqOPMvo
- TLSH
  T1CD549EA5B3901CF8ED67813ECD554906D6B27C5A0B60C65F03B8366A5F333A11C3EBA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1