General
- Target 2026-09-08_889b23c041f3ea12ae61d9d18a8d62dd_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260908-sahkrssva1
- SHA256 fdef0f7ca7eb613b7c7d2c14bfe9f0c546cc0b0c6bb6875cf64c7cbe21a7fffc
- MD5 889b23c041f3ea12ae61d9d18a8d62dd
- SHA1 0660ea2d42d9185670f68e070e5359be2979d07a
- SHA512 2bbd75859f0a019d1b3c948c82c51129f51d5d7137a1e746826ad5e9158c52b2aa34c7c2235ad7b89bff9d6391b773441beebe16944f235415279e3409677880
- SSDEEP 12288:xxupsxkHFWl+vShLdPgCPwIsDjwKlqA70Yon/nWfu27wQrvMg8+Jl7mUbYaHfXBD:xx8sxkHFWl+2LdPfklqA7lfupQ58e7zl
- TLSH T1EEF4384663EC42E4F1F3AA3899724156DB72BC614B75C2CF0254566E1E73AD08E3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_889b23c041f3ea12ae61d9d18a8d62dd_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_889b23c041f3ea12ae61d9d18a8d62dd_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_889b23c041f3ea12ae61d9d18a8d62dd_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 fdef0f7ca7eb613b7c7d2c14bfe9f0c546cc0b0c6bb6875cf64c7cbe21a7fffc
- MD5 889b23c041f3ea12ae61d9d18a8d62dd
- SHA1 0660ea2d42d9185670f68e070e5359be2979d07a
- SHA512 2bbd75859f0a019d1b3c948c82c51129f51d5d7137a1e746826ad5e9158c52b2aa34c7c2235ad7b89bff9d6391b773441beebe16944f235415279e3409677880
- SSDEEP 12288:xxupsxkHFWl+vShLdPgCPwIsDjwKlqA70Yon/nWfu27wQrvMg8+Jl7mUbYaHfXBD:xx8sxkHFWl+2LdPfklqA7lfupQ58e7zl
- TLSH T1EEF4384663EC42E4F1F3AA3899724156DB72BC614B75C2CF0254566E1E73AD08E3AB33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.