Analysis
- max time kernel
148s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/11/2026, 22:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe
- Size 294KB
- Sample261101-14k7rayte1
- SHA256 4a5fd7e09cc057e89fd7eeb5f118f4e1faf411b9c9341a83965ca193f6ca4669
- MD5 9f50d0cba4555b8877d413cb46058f4e
- SHA1 cb8fbae6754865e7cab9c8ddf840e561b7c2d73f
- SHA512 bc9e8113eaecc2f5bfb8fcc489285340c053facc8c6012b7b7ec40469f0131242d5bc37360a76a73839585661a2f623b24130c718fbcf0711da0438933fceeda
- SSDEEP 6144:foxn2B2xF7hHbf3bYkwoHRhHlD6Wm1CBJBUGm:jKFw20af
- TLSH T1C8547D1AA69005FDE5A7817DCD825D42EB727C0607B1EADF079049A31E2B6E0DF3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2364 2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-10-31_9f50d0cba4555b8877d413cb46058f4e_cobalt-strike_icedid_njrat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2364