General
- Target 2026-08-30_009253df010bfc862c68a01f18eb37bf_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- Sample260830-2jwy7a1fpe
- SHA256 e3a8e303867df14986e98d8800501c2b24def3ccbe764c36b47c39a883f27e60
- MD5 009253df010bfc862c68a01f18eb37bf
- SHA1 35a674bc4983a2f915d98f758efaf6f69c61c7c1
- SHA512 3f52a2cd3964c28649bbd0b012750e479665333837b9619e77ca136d0521b3d5df08e0354471002a9cd3a4d95751c24fd7f6ffed2053c375a63ac37d7a33c5bc
- SSDEEP 12288:MrvAOowpc29j3YVOTQKGIUo1HuQnFGjq5T7zse2wN275Ls5NTNzaeKBE5EeN:Q7c29jzpGIU6uwGwXsep8GNW0
- TLSH T162050269B39208E9EC77C23DC9E2C412E67274254324EADF13A446661F337D46E3EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_009253df010bfc862c68a01f18eb37bf_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_009253df010bfc862c68a01f18eb37bf_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 815KB
- SHA256 e3a8e303867df14986e98d8800501c2b24def3ccbe764c36b47c39a883f27e60
- MD5 009253df010bfc862c68a01f18eb37bf
- SHA1 35a674bc4983a2f915d98f758efaf6f69c61c7c1
- SHA512 3f52a2cd3964c28649bbd0b012750e479665333837b9619e77ca136d0521b3d5df08e0354471002a9cd3a4d95751c24fd7f6ffed2053c375a63ac37d7a33c5bc
- SSDEEP 12288:MrvAOowpc29j3YVOTQKGIUo1HuQnFGjq5T7zse2wN275Ls5NTNzaeKBE5EeN:Q7c29jzpGIU6uwGwXsep8GNW0
- TLSH T162050269B39208E9EC77C23DC9E2C412E67274254324EADF13A446661F337D46E3EB91
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1