General
- Target 2026-10-22_6e610d56d8e54c308868456d87c07a9d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample261024-lbmsjstte1
- SHA256 0801e0893fa300e0192687a012197c5c028eb6e670680e68d4489e8363632841
- MD5 6e610d56d8e54c308868456d87c07a9d
- SHA1 fcbd6a1d66d9a6103044864fac3c49973efae2d1
- SHA512 8db8bedd5c887fe1ba7b93e54bf3d0c52e45d5e08c0997ea06c81348f08c4765b45b0d4febba7230434d6f3bc8c755e20e850e07ca6a9f65fafb93fbcd933cdc
- SSDEEP 24576:zLW4m72ULP7DhspWcY/0eajnXB6WQWqVHC58AxKZvI6B4+4zC:zLbZUr7FspHYWR6WQZU9xKZvC+4zC
- TLSH T10275D01BB6A900FDD069C179CB465132EA71B8460F70BAEF039192693E37AE05F3D725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_6e610d56d8e54c308868456d87c07a9d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_6e610d56d8e54c308868456d87c07a9d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6e610d56d8e54c308868456d87c07a9d_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 0801e0893fa300e0192687a012197c5c028eb6e670680e68d4489e8363632841
- MD5 6e610d56d8e54c308868456d87c07a9d
- SHA1 fcbd6a1d66d9a6103044864fac3c49973efae2d1
- SHA512 8db8bedd5c887fe1ba7b93e54bf3d0c52e45d5e08c0997ea06c81348f08c4765b45b0d4febba7230434d6f3bc8c755e20e850e07ca6a9f65fafb93fbcd933cdc
- SSDEEP 24576:zLW4m72ULP7DhspWcY/0eajnXB6WQWqVHC58AxKZvI6B4+4zC:zLbZUr7FspHYWR6WQZU9xKZvC+4zC
- TLSH T10275D01BB6A900FDD069C179CB465132EA71B8460F70BAEF039192693E37AE05F3D725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory