General
- Target 2026-08-25_f6b9456a70bf80e1c8ad3bdcdf94836c_cobalt-strike_icedid_njrat_vidar
- Size 3.5MB
- Sample260826-b2dbpaxyh1
- SHA256 7368a091c914fcffa249fd5f15d7ce003bdd50543f26ac3207444efd4ea2d6f5
- MD5 f6b9456a70bf80e1c8ad3bdcdf94836c
- SHA1 40b403ae05313409ff6067445ec877eb33b943b3
- SHA512 5b0b989258f5df0063a04ef6d7802511b046bb6644b4c9b0d7923659e01bf1f586d31808afa9d30f89e176a5855e779abfb4a7b3bee03a9218eb44540c3ea8a4
- SSDEEP 49152:XoE4GIUBb2PteNC/ECkh6TNZAxDVJSZ9ldFZo/Ps3WX67rB1e2ZDmg27RnWGj:4ZGIUx2PQJxh65Zmy9BHVZD527BWG
- TLSH T19F06AF5772AD01F8E077D17DCA475A06E7B2780A473297CB12B446AA2F27BE14E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_f6b9456a70bf80e1c8ad3bdcdf94836c_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-25_f6b9456a70bf80e1c8ad3bdcdf94836c_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_f6b9456a70bf80e1c8ad3bdcdf94836c_cobalt-strike_icedid_njrat_vidar
- Size 3.5MB
- SHA256 7368a091c914fcffa249fd5f15d7ce003bdd50543f26ac3207444efd4ea2d6f5
- MD5 f6b9456a70bf80e1c8ad3bdcdf94836c
- SHA1 40b403ae05313409ff6067445ec877eb33b943b3
- SHA512 5b0b989258f5df0063a04ef6d7802511b046bb6644b4c9b0d7923659e01bf1f586d31808afa9d30f89e176a5855e779abfb4a7b3bee03a9218eb44540c3ea8a4
- SSDEEP 49152:XoE4GIUBb2PteNC/ECkh6TNZAxDVJSZ9ldFZo/Ps3WX67rB1e2ZDmg27RnWGj:4ZGIUx2PQJxh65Zmy9BHVZD527BWG
- TLSH T19F06AF5772AD01F8E077D17DCA475A06E7B2780A473297CB12B446AA2F27BE14E7E310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Drops file in System32 directory