General
- Target 2026-10-28_531fb1f08e3e6942b3cee39d8d2a38f2_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.8MB
- Sample261030-e67mwahs5z
- SHA256 0d72f3f79098d58a9a0b37488e4564c0ab889823b9f12345c636129b1a884b96
- MD5 531fb1f08e3e6942b3cee39d8d2a38f2
- SHA1 4634a48d7bf9774c40c4afc55db6562b31ade645
- SHA512 5c48a14486992bf9b9497d6721ba1eb24d8360575d9725fffa44edc007a562d37257e5f89a6d12af9e151aa7988b864bf2261684fe572a0bd893d42f607ccc72
- SSDEEP 24576:C+T0AYyBE9Wx/tEX6PoC0jIMu563tAj0rMKM/a9kS8gze9LJBUmjy12:Ce0AYXWxyXGohjIMDnM7iqa2
- TLSH T1C385CF0BB26508EAC2A9C074CE1AD5319761BC4E0BF255FB3581F2D92E36AD07F39B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Behavioral task
behavioral1
Sample
2026-10-28_531fb1f08e3e6942b3cee39d8d2a38f2_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_531fb1f08e3e6942b3cee39d8d2a38f2_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_531fb1f08e3e6942b3cee39d8d2a38f2_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.8MB
- SHA256 0d72f3f79098d58a9a0b37488e4564c0ab889823b9f12345c636129b1a884b96
- MD5 531fb1f08e3e6942b3cee39d8d2a38f2
- SHA1 4634a48d7bf9774c40c4afc55db6562b31ade645
- SHA512 5c48a14486992bf9b9497d6721ba1eb24d8360575d9725fffa44edc007a562d37257e5f89a6d12af9e151aa7988b864bf2261684fe572a0bd893d42f607ccc72
- SSDEEP 24576:C+T0AYyBE9Wx/tEX6PoC0jIMu563tAj0rMKM/a9kS8gze9LJBUmjy12:Ce0AYXWxyXGohjIMDnM7iqa2
- TLSH T1C385CF0BB26508EAC2A9C074CE1AD5319761BC4E0BF255FB3581F2D92E36AD07F39B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory