General
- Target 2026-09-13_3d01d4527bfda78a13b5454adee4fd1b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- Sample260913-tkga5azaqa
- SHA256 5bda456f21294f6e53bf90d3acb63b24f8462f964467bc50cfc93f41781843e0
- MD5 3d01d4527bfda78a13b5454adee4fd1b
- SHA1 b4ba44dbb28150a49e6256a9a966e47130284030
- SHA512 a3fad2a7c7bcb9fba462ec25821303c6e96b2124e3e034f987968639fe149d4eaf6ca957c828a0e0a019e3a45ed9f1307e5d01a97eeae6b64c0f4a43c4e61ad2
- SSDEEP 24576:rH0XvGJ+RW25Km1ddLQEyJUQL+Eoy3UOx3UvLD8Ta:b4xW6dDyJUU+FdOle8e
- TLSH T13025F129F3601DF8FC2AD13CC9A29512D972F8250761DADF535496262F336E05E3AF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_3d01d4527bfda78a13b5454adee4fd1b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_3d01d4527bfda78a13b5454adee4fd1b_cobalt-strike_icedid_mespinoza_njrat_ryuk_vidar
- Size 965KB
- SHA256 5bda456f21294f6e53bf90d3acb63b24f8462f964467bc50cfc93f41781843e0
- MD5 3d01d4527bfda78a13b5454adee4fd1b
- SHA1 b4ba44dbb28150a49e6256a9a966e47130284030
- SHA512 a3fad2a7c7bcb9fba462ec25821303c6e96b2124e3e034f987968639fe149d4eaf6ca957c828a0e0a019e3a45ed9f1307e5d01a97eeae6b64c0f4a43c4e61ad2
- SSDEEP 24576:rH0XvGJ+RW25Km1ddLQEyJUQL+Eoy3UOx3UvLD8Ta:b4xW6dDyJUU+FdOle8e
- TLSH T13025F129F3601DF8FC2AD13CC9A29512D972F8250761DADF535496262F336E05E3AF22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1