General
- Target 2026-10-22_5bd9d283e6a763973db6a699c3158f8b_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample261024-n7pccshx2x
- SHA256 20bdd1a7e17077ee9b75edf64fd03c7059e5354bb417bc9558cb10e4b0492e87
- MD5 5bd9d283e6a763973db6a699c3158f8b
- SHA1 21ed363b06dee0bcf9946f7f5ebb2963c543e7c9
- SHA512 60bedbe6eeeb387ff3dec4f25afbeeb340523b034e4e9f85306c38cd7f00e530bae5dcaa36f6f0a6ac829666533a9de1e1e098c1967c1fc41e942f6e34b46075
- SSDEEP 24576:0LM4k0VpLP7DhspWcY/0eaokCM5s/kq8lWbcOlJIyxBiQAxyUj5wkifGTHy:0L5Lpr7FspHY9u5CUWwODhcQG1sGTS
- TLSH T1D275E01BB6A910F9D029C179C7465232EAB1F8420B72B9DF0391D3693E37AE45F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_5bd9d283e6a763973db6a699c3158f8b_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_5bd9d283e6a763973db6a699c3158f8b_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_5bd9d283e6a763973db6a699c3158f8b_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 20bdd1a7e17077ee9b75edf64fd03c7059e5354bb417bc9558cb10e4b0492e87
- MD5 5bd9d283e6a763973db6a699c3158f8b
- SHA1 21ed363b06dee0bcf9946f7f5ebb2963c543e7c9
- SHA512 60bedbe6eeeb387ff3dec4f25afbeeb340523b034e4e9f85306c38cd7f00e530bae5dcaa36f6f0a6ac829666533a9de1e1e098c1967c1fc41e942f6e34b46075
- SSDEEP 24576:0LM4k0VpLP7DhspWcY/0eaokCM5s/kq8lWbcOlJIyxBiQAxyUj5wkifGTHy:0L5Lpr7FspHY9u5CUWwODhcQG1sGTS
- TLSH T1D275E01BB6A910F9D029C179C7465232EAB1F8420B72B9DF0391D3693E37AE45F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory