General
- Target 2026-09-04_6dcaed08a6479754b312ff09f9fbe93c_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- Sample260905-jevw8azbna
- SHA256 2290648ef23b419287b175533a5181bb7b6551e30d537804c22c05da286129e8
- MD5 6dcaed08a6479754b312ff09f9fbe93c
- SHA1 def4b4200c40291c8d96ba6c8b682de8361a77ca
- SHA512 495dfc9cf31f69dbd0ad0f0c87ace1caae570ea772165b7d5d6463d8d82211b6d2e0f9d0d800e47c13390676db78d236610ac7fe8f095b184792f3f5c8bc95ff
- SSDEEP 6144:bcdCves9VNGyM4ODf7M/1/XMgJ7olgtlhnP17clYMYD:gsves9VUXp7qh24lhnPV
- TLSH T13D549D39B7D009F9DC67827CC9F2D926EA7238500364DADB53A486651F233C05E3EBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6dcaed08a6479754b312ff09f9fbe93c_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6dcaed08a6479754b312ff09f9fbe93c_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6dcaed08a6479754b312ff09f9fbe93c_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 298KB
- SHA256 2290648ef23b419287b175533a5181bb7b6551e30d537804c22c05da286129e8
- MD5 6dcaed08a6479754b312ff09f9fbe93c
- SHA1 def4b4200c40291c8d96ba6c8b682de8361a77ca
- SHA512 495dfc9cf31f69dbd0ad0f0c87ace1caae570ea772165b7d5d6463d8d82211b6d2e0f9d0d800e47c13390676db78d236610ac7fe8f095b184792f3f5c8bc95ff
- SSDEEP 6144:bcdCves9VNGyM4ODf7M/1/XMgJ7olgtlhnP17clYMYD:gsves9VUXp7qh24lhnPV
- TLSH T13D549D39B7D009F9DC67827CC9F2D926EA7238500364DADB53A486651F233C05E3EBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.