General
- Target 2026-10-08_5081776fe5c87de3ccea253a918d0e19_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample261009-sd7n3abe89
- SHA256 1ab2e5a8b1f10d8887fd24553185334bb698a844c394afe9bfbbc59a8ee4f252
- MD5 5081776fe5c87de3ccea253a918d0e19
- SHA1 42c7f4bcaa31e45b3be8051ca61b548e44100e8f
- SHA512 8907ac8f659056f3a7aeca18d72c082727cccb4b9dbe2e468c6828f2ab881b1e4e848836bbd6ab621227f0976357d6e76903daecc53deb0b862b09bfd3af9e94
- SSDEEP 24576:JczXC0VpLP7DhspWcY/0ea3h4ay8gjkGrLoODqiIPZfBSLAel2NDx:Jc75pr7FspHYAvy8MpLgVKLRMV
- TLSH T1CE75D01BBAA910FDD069C139C7465232EA71B8460B70A9EF0391D36D3E37AE05F39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_5081776fe5c87de3ccea253a918d0e19_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_5081776fe5c87de3ccea253a918d0e19_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_5081776fe5c87de3ccea253a918d0e19_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 1ab2e5a8b1f10d8887fd24553185334bb698a844c394afe9bfbbc59a8ee4f252
- MD5 5081776fe5c87de3ccea253a918d0e19
- SHA1 42c7f4bcaa31e45b3be8051ca61b548e44100e8f
- SHA512 8907ac8f659056f3a7aeca18d72c082727cccb4b9dbe2e468c6828f2ab881b1e4e848836bbd6ab621227f0976357d6e76903daecc53deb0b862b09bfd3af9e94
- SSDEEP 24576:JczXC0VpLP7DhspWcY/0ea3h4ay8gjkGrLoODqiIPZfBSLAel2NDx:Jc75pr7FspHYAvy8MpLgVKLRMV
- TLSH T1CE75D01BBAA910FDD069C139C7465232EA71B8460B70A9EF0391D36D3E37AE05F39725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory