General
- Target 2026-08-21_01847fa83f40de017b96db50ff920430_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- Sample260822-ynkvyabq2v
- SHA256 0822e312559b5cd8f9dae55ab34e2775b68d2c449343f68c737d1493c154edd1
- MD5 01847fa83f40de017b96db50ff920430
- SHA1 5fa72ff834fbcc4aea33e1f6b8b6885233c71acb
- SHA512 1d9f142db843454edf2cbd29770cd7f795f4b0168af45845dd6cdb1ac5957fa41686942c22fad4bdb625bbe309843713c986b51c82da799a3c82029442c3aa77
- SSDEEP 12288:P429YHOzWG5vJVjJAdGypGATMTqqln+QAyTLJYhYCu0d/nWFDRa6BIjgr:iH0vJFJ+RTATqGTTL6Zu0d/uFa6BIj
- TLSH T1D725F12AB35018F8FC3AD27CC9A74511D972F8290760DAEF536496263F732D05E3AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_01847fa83f40de017b96db50ff920430_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_01847fa83f40de017b96db50ff920430_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- SHA256 0822e312559b5cd8f9dae55ab34e2775b68d2c449343f68c737d1493c154edd1
- MD5 01847fa83f40de017b96db50ff920430
- SHA1 5fa72ff834fbcc4aea33e1f6b8b6885233c71acb
- SHA512 1d9f142db843454edf2cbd29770cd7f795f4b0168af45845dd6cdb1ac5957fa41686942c22fad4bdb625bbe309843713c986b51c82da799a3c82029442c3aa77
- SSDEEP 12288:P429YHOzWG5vJVjJAdGypGATMTqqln+QAyTLJYhYCu0d/nWFDRa6BIjgr:iH0vJFJ+RTATqGTTL6Zu0d/uFa6BIj
- TLSH T1D725F12AB35018F8FC3AD27CC9A74511D972F8290760DAEF536496263F732D05E3AB25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1