General
- Target 2026-09-26_5896e88cfe8764a1f8fc63bfdea159f3_cobalt-strike_icedid_njrat
- Size 862KB
- Sample260926-2cq5csvxay
- SHA256 4cf701f4d988799484d719772378422d634ba3107bfb4c26ed0f96afbbb9177d
- MD5 5896e88cfe8764a1f8fc63bfdea159f3
- SHA1 cf01504f06ae5df4184df3b967b7cda773f199d3
- SHA512 454ecb7799db6792ccc26ea28371554a1135ecbd357e2c89fcb7b920876c431a6b6238a31ae536a6ac554f05de0b4a083f4f4f7ce8d9a13253bae45a8b37d31a
- SSDEEP 12288:zR4P8vfHB1CMLtVflYHF3u+hpUkqSFz2lqESRHgdP5FV6hPJhfgLhbD1jNE:zR3WmtMFlrnFKlqtHTJhfot1jNE
- TLSH T1B015E007A2B508F5E8BAC33B85117116B5B2B88527B4EFEB9345192F5F636E0783D381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-26_5896e88cfe8764a1f8fc63bfdea159f3_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_5896e88cfe8764a1f8fc63bfdea159f3_cobalt-strike_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_5896e88cfe8764a1f8fc63bfdea159f3_cobalt-strike_icedid_njrat
- Size 862KB
- SHA256 4cf701f4d988799484d719772378422d634ba3107bfb4c26ed0f96afbbb9177d
- MD5 5896e88cfe8764a1f8fc63bfdea159f3
- SHA1 cf01504f06ae5df4184df3b967b7cda773f199d3
- SHA512 454ecb7799db6792ccc26ea28371554a1135ecbd357e2c89fcb7b920876c431a6b6238a31ae536a6ac554f05de0b4a083f4f4f7ce8d9a13253bae45a8b37d31a
- SSDEEP 12288:zR4P8vfHB1CMLtVflYHF3u+hpUkqSFz2lqESRHgdP5FV6hPJhfgLhbD1jNE:zR3WmtMFlrnFKlqtHTJhfot1jNE
- TLSH T1B015E007A2B508F5E8BAC33B85117116B5B2B88527B4EFEB9345192F5F636E0783D381
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Suspicious use of NtSetInformationThreadHideFromDebugger