General
- Target 2026-10-20_39625dc0f6c8d1ea6396118e8259f7e8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample261020-jnprkaxtbx
- SHA256 34d544b9c551f99d9324865189c653f9d6ca5c7429c06ffcb51123d6880a0bee
- MD5 39625dc0f6c8d1ea6396118e8259f7e8
- SHA1 c8158cc6fa6e9dfc156694451afa3516f48f042b
- SHA512 ccb2e77dc946434921eb92cbe23dc7a22d5e7bdc97b5b95c34dab2ef917e96196852735b4ae58d3a68a9c69739a7a981ce6eb8fb730392cfd8d73c27c50646f9
- SSDEEP 24576:dJI4xLn4LP7DhspWcY/0eaATW2FvSSl81QfKaDSAWb3RsHYkACYp:dJtt4r7FspHYZvSp1yDbWb3Rk+1p
- TLSH T13B75D00BBAA900FDD069C179CB469132EA71B8460F74BADF039193693E776E45F39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-20_39625dc0f6c8d1ea6396118e8259f7e8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-20_39625dc0f6c8d1ea6396118e8259f7e8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-20_39625dc0f6c8d1ea6396118e8259f7e8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 34d544b9c551f99d9324865189c653f9d6ca5c7429c06ffcb51123d6880a0bee
- MD5 39625dc0f6c8d1ea6396118e8259f7e8
- SHA1 c8158cc6fa6e9dfc156694451afa3516f48f042b
- SHA512 ccb2e77dc946434921eb92cbe23dc7a22d5e7bdc97b5b95c34dab2ef917e96196852735b4ae58d3a68a9c69739a7a981ce6eb8fb730392cfd8d73c27c50646f9
- SSDEEP 24576:dJI4xLn4LP7DhspWcY/0eaATW2FvSSl81QfKaDSAWb3RsHYkACYp:dJtt4r7FspHYZvSp1yDbWb3Rk+1p
- TLSH T13B75D00BBAA900FDD069C179CB469132EA71B8460F74BADF039193693E776E45F39720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory