General
- Target 2026-08-24_c89c0fd5f0862383f8f6a7ecc0791c2b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- Sample260825-brtkxsff33
- SHA256 4ca931993cb08ef9c9de3d6b472fd231afa22c3dc087d73d89232f2360edd3c6
- MD5 c89c0fd5f0862383f8f6a7ecc0791c2b
- SHA1 6ef06fe846e4e0ff7af7d0262442bec8a83795f5
- SHA512 a0c7afbb4e8888b636ef14c3b75032e44ac3cdbe11c6f28c2304065e3e4f23fe4df57e8d865ed653c0c29b3a4f2ea7581a4a3a2e32265e64ec9e5e7ee556591f
- SSDEEP 6144:fX8Sg49KXs9y36doD744FQG9D6LRJBNFwjaJg3PfcKrKywb0RUzyi/1KE5xx9UdT:JgqEs9qxX3zxEdJAdGyk0M+4wd9Z
- TLSH T173A49E29F3A02CF8FC2BD17C89B29511E971B8250750EAEB1194962A2F733D05E3FB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_c89c0fd5f0862383f8f6a7ecc0791c2b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_c89c0fd5f0862383f8f6a7ecc0791c2b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_c89c0fd5f0862383f8f6a7ecc0791c2b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 453KB
- SHA256 4ca931993cb08ef9c9de3d6b472fd231afa22c3dc087d73d89232f2360edd3c6
- MD5 c89c0fd5f0862383f8f6a7ecc0791c2b
- SHA1 6ef06fe846e4e0ff7af7d0262442bec8a83795f5
- SHA512 a0c7afbb4e8888b636ef14c3b75032e44ac3cdbe11c6f28c2304065e3e4f23fe4df57e8d865ed653c0c29b3a4f2ea7581a4a3a2e32265e64ec9e5e7ee556591f
- SSDEEP 6144:fX8Sg49KXs9y36doD744FQG9D6LRJBNFwjaJg3PfcKrKywb0RUzyi/1KE5xx9UdT:JgqEs9qxX3zxEdJAdGyk0M+4wd9Z
- TLSH T173A49E29F3A02CF8FC2BD17C89B29511E971B8250750EAEB1194962A2F733D05E3FB55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.