General
- Target 2026-10-09_ad86a3390ca142f6a3f54e8f544bec26_cobalt-strike_icedid_megazord_njrat_ryuk_voidlink
- Size 238KB
- Sample261010-hfcxcshv5m
- SHA256 badad8fb1e0ce9909dae02b4a6d4edca77f7921db7336d67f28656d8f2c9308a
- MD5 ad86a3390ca142f6a3f54e8f544bec26
- SHA1 607ebc29fc0f3fc19972cf7796cbd4b10f656f90
- SHA512 c3d528eaa681d0e2101bb341a17e94c2022cc3f8ac53805ca46e4b9dee60a17a21d73a66cb2678a02247b7087907197c765deefd92460fc4e0fb043f6c8eb068
- SSDEEP 3072:jZjPGKD7oCLWQiYfDJCnyIGet80fflSx1GccXAZ7Rll1OYPdVJ8x7Lfe9B7y0xBi:j1PBfDJSNpflSxdbZVtTmxPsN4PZ
- TLSH T1B8348C0572A55CF1ED37823D89938A45EA727C150721EAEF03E053626F636D0AF3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-09_ad86a3390ca142f6a3f54e8f544bec26_cobalt-strike_icedid_megazord_njrat_ryuk_voidlink.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
2026-10-09_ad86a3390ca142f6a3f54e8f544bec26_cobalt-strike_icedid_megazord_njrat_ryuk_voidlink.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Extracted
-
animateclipper
-
bsc.blockrazor.xyz
-
update-S-2-5-26-24247216-2331352693-3112950123
-
0x8eb9a56afbe6d79aa90fba9c8f6af7321490c786
-
1B7GRvB1WMZYNCz5FdXocHicUyp8pj1FvX
-
1Ht6TLmpMc3xhN5euPZo5ecC4RJtfJrJu8
-
3BJquhr9pnQhMo1RCPJHsKnrUKgs8StkKT
-
8SjFSqSJ6DYAcBJrNGN76hEhcij5vtyJK5G819CvV7Fm
-
DKSfYvjh8hZwR6q3nNvtKYrgK892groxfd
-
LNMjkFCv1R2T5vwvuXmUFHHeJLmYAdgzX3
-
TSw3kk2GCyUUsGnvR2ZHSNoEaWkhfkGE1J
-
UQCYdXT16Xxzr1qCSVxxntce0-UYXmcqJ_aodkoq39Fv2E6f
-
XdJHMeC11gmiA5rpnJhu9cTax61q333o1g
-
bc1qw8wnedcwur3e4pq6qpdrquxpd09a5lss5glf77
-
cosmos1pgtakf0xe8ehexdgqz9c3lj436wyyg772qec8m
-
ltc1qs9whv7632zyrr828n7e6g5jqtq0ykgklvfm80u
-
qphwpg3ja0awpjt2vrfy5mxmk3h24vrswg9ll9umkm
-
rKaNCgLvMEXxNzMxj2F7FYi1AdRrTo6Nhu
-
auth_token
824c6b4d-4f01-4e22-a500-c7d239e10480
-
contract
0x77c08D8A4Eab268fd5728ae8fE41b1FDE52967dF
-
headers
Authorization: 824c6b4d-4f01-4e22-a500-c7d239e10480
Content-Type: application/x-www-form-urlencoded
Targets
-
- Target 2026-10-09_ad86a3390ca142f6a3f54e8f544bec26_cobalt-strike_icedid_megazord_njrat_ryuk_voidlink
- Size 238KB
- SHA256 badad8fb1e0ce9909dae02b4a6d4edca77f7921db7336d67f28656d8f2c9308a
- MD5 ad86a3390ca142f6a3f54e8f544bec26
- SHA1 607ebc29fc0f3fc19972cf7796cbd4b10f656f90
- SHA512 c3d528eaa681d0e2101bb341a17e94c2022cc3f8ac53805ca46e4b9dee60a17a21d73a66cb2678a02247b7087907197c765deefd92460fc4e0fb043f6c8eb068
- SSDEEP 3072:jZjPGKD7oCLWQiYfDJCnyIGet80fflSx1GccXAZ7Rll1OYPdVJ8x7Lfe9B7y0xBi:j1PBfDJSNpflSxdbZVtTmxPsN4PZ
- TLSH T1B8348C0572A55CF1ED37823D89938A45EA727C150721EAEF03E053626F636D0AF3EB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10