General
- Target 2026-09-09_ef3bbcbe8531ebe7bcaf0ead92177c79_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- Sample260910-1rvknayxav
- SHA256 f7e776f8ada6d1db346612c688f180f20cd2a44f35a8e6abe835b89074594d92
- MD5 ef3bbcbe8531ebe7bcaf0ead92177c79
- SHA1 5f9ee98d57531ab6593d43a5883b53a82bb83f66
- SHA512 864e2c84e39401af5ca540ad8ad0aa86dbed5b1a26be8c2d5060571d5c381bd65661a7d1d0b454e675bb562aeb2cd614d1485903ed37394d7e6f5a6d57f8d93c
- SSDEEP 12288:peM9Nkkkfq8zr3z4P3B4J+t3DjpBLlqW7YonDnWxBVEmwar0Mg8+Jl7mUbYaJhZQ:peCNkkkfq8zX4P3CoFlqWKxBaaW8e7zm
- TLSH T195F4378263EC42E4F1F3AB3899724556DB72BC514B75C2CF0250566E1E73AD18E3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-09_ef3bbcbe8531ebe7bcaf0ead92177c79_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_ef3bbcbe8531ebe7bcaf0ead92177c79_cobalt-strike_hijackloader_icedid_njrat.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_ef3bbcbe8531ebe7bcaf0ead92177c79_cobalt-strike_hijackloader_icedid_njrat
- Size 736KB
- SHA256 f7e776f8ada6d1db346612c688f180f20cd2a44f35a8e6abe835b89074594d92
- MD5 ef3bbcbe8531ebe7bcaf0ead92177c79
- SHA1 5f9ee98d57531ab6593d43a5883b53a82bb83f66
- SHA512 864e2c84e39401af5ca540ad8ad0aa86dbed5b1a26be8c2d5060571d5c381bd65661a7d1d0b454e675bb562aeb2cd614d1485903ed37394d7e6f5a6d57f8d93c
- SSDEEP 12288:peM9Nkkkfq8zr3z4P3B4J+t3DjpBLlqW7YonDnWxBVEmwar0Mg8+Jl7mUbYaJhZQ:peCNkkkfq8zX4P3CoFlqWKxBaaW8e7zm
- TLSH T195F4378263EC42E4F1F3AB3899724556DB72BC514B75C2CF0250566E1E73AD18E3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.