General
- Target 2026-08-30_0baf386335a154eec8f55529e2a1644b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- Sample260830-1v56kade68
- SHA256 22e802fa4fbf5e34e9bc1d767f8a856012da5c298a1c386dbf3d7d173d8bcc9e
- MD5 0baf386335a154eec8f55529e2a1644b
- SHA1 e58f5966ccc586ec4db81e4030a48ec448c8748f
- SHA512 82da408278e6f39504f9a6fd31c9d5c3c53d3fe48b17d0e8a670e5aff1fcd610ac997ca77904c003af69d2b2d1f953dd2cb854917e0bb982ea07c1d2f912286e
- SSDEEP 12288:idTGIpwpc29mijCnkH79iF71xmrGcMQTWQRp07S75pSCjFNEySOgOn/WDDAKK:A4c29BPH79S1xyGvQhH88LjFGpKn+HA
- TLSH T15B05F16DB3A009FDDD26C17CCDE2D422E572382607A0EADB139056661F336D06E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_0baf386335a154eec8f55529e2a1644b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_0baf386335a154eec8f55529e2a1644b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 819KB
- SHA256 22e802fa4fbf5e34e9bc1d767f8a856012da5c298a1c386dbf3d7d173d8bcc9e
- MD5 0baf386335a154eec8f55529e2a1644b
- SHA1 e58f5966ccc586ec4db81e4030a48ec448c8748f
- SHA512 82da408278e6f39504f9a6fd31c9d5c3c53d3fe48b17d0e8a670e5aff1fcd610ac997ca77904c003af69d2b2d1f953dd2cb854917e0bb982ea07c1d2f912286e
- SSDEEP 12288:idTGIpwpc29mijCnkH79iF71xmrGcMQTWQRp07S75pSCjFNEySOgOn/WDDAKK:A4c29BPH79S1xyGvQhH88LjFGpKn+HA
- TLSH T15B05F16DB3A009FDDD26C17CCDE2D422E572382607A0EADB139056661F336D06E3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory