General
- Target 2026-10-22_6dfcf39a5cb1306537c02170f244a422_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample261024-ldppxsys5j
- SHA256 9c15298b4627e8bf67f8634becb17c09a6658f72f3a0493e8e28ac93b7056d06
- MD5 6dfcf39a5cb1306537c02170f244a422
- SHA1 b50833a75e2aedf263a75640cf19d93e64eb1acd
- SHA512 a6f5b7e43198f48f5ac7499659d422b2a6ebc37d37c9ac95ebeeef3ea52b2046d9e3fe7201477c036f2e1029eceec53f2a8689297a096db613b929bc4cc7fd6e
- SSDEEP 24576:0L54kM50LP7DhspWcY/0eax4aD0gvtl3Bf6z5g7oM9xdml4ZFKGz:0Lar0r7FspHY11gvtlxSGLdrFxz
- TLSH T16A75D01BBAA900F9D029C179C7469232E671F8460F70BAEF0391926D3E776E45F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_6dfcf39a5cb1306537c02170f244a422_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_6dfcf39a5cb1306537c02170f244a422_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_6dfcf39a5cb1306537c02170f244a422_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 9c15298b4627e8bf67f8634becb17c09a6658f72f3a0493e8e28ac93b7056d06
- MD5 6dfcf39a5cb1306537c02170f244a422
- SHA1 b50833a75e2aedf263a75640cf19d93e64eb1acd
- SHA512 a6f5b7e43198f48f5ac7499659d422b2a6ebc37d37c9ac95ebeeef3ea52b2046d9e3fe7201477c036f2e1029eceec53f2a8689297a096db613b929bc4cc7fd6e
- SSDEEP 24576:0L54kM50LP7DhspWcY/0eax4aD0gvtl3Bf6z5g7oM9xdml4ZFKGz:0Lar0r7FspHY11gvtlxSGLdrFxz
- TLSH T16A75D01BBAA900F9D029C179C7469232E671F8460F70BAEF0391926D3E776E45F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory