General
- Target 2026-08-30_c8bc48490da482ff75794d226e56518d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- Sample260831-e83fyavcqh
- SHA256 16c0e451b9013e90e7858b447fcd294f05c968fb38742ef114959e00c8af66b9
- MD5 c8bc48490da482ff75794d226e56518d
- SHA1 364c7fdecb3273dc06dae72c9557fcb4a19d925c
- SHA512 f7b4d0ecd82a284c99fc10ee8e183a02326f50b7fa3f116bd9c71f46a25f26df6da535afd91b4da4733f16c388f005e538c711299877a1c6dbad9ec4a64428c0
- SSDEEP 24576:GH0OZmJ+R/8BHWPyjbpjP5JGjToAVTzTjE6x0CjLp:m9XehjtwzTgtC3p
- TLSH T16225F129B7611DF8FC3BE178C9628512E972F8150760DAEB135096262F332E05A3FF65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_c8bc48490da482ff75794d226e56518d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_c8bc48490da482ff75794d226e56518d_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- SHA256 16c0e451b9013e90e7858b447fcd294f05c968fb38742ef114959e00c8af66b9
- MD5 c8bc48490da482ff75794d226e56518d
- SHA1 364c7fdecb3273dc06dae72c9557fcb4a19d925c
- SHA512 f7b4d0ecd82a284c99fc10ee8e183a02326f50b7fa3f116bd9c71f46a25f26df6da535afd91b4da4733f16c388f005e538c711299877a1c6dbad9ec4a64428c0
- SSDEEP 24576:GH0OZmJ+R/8BHWPyjbpjP5JGjToAVTzTjE6x0CjLp:m9XehjtwzTgtC3p
- TLSH T16225F129B7611DF8FC3BE178C9628512E972F8150760DAEB135096262F332E05A3FF65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1