General
- Target 2026-11-02_bf337450a78a9dbd49581e50c0f0ffaa_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample261102-3xjfpady81
- SHA256 3cb09011f32b737c359b60884a07571c6f3e94de1b344dfdae113b8eb30fc1a3
- MD5 bf337450a78a9dbd49581e50c0f0ffaa
- SHA1 f44629fcda49c5fdadddc71209e77a98fcee0249
- SHA512 78d85d3ac5d0cd1fa80a6bf17f9e615a2a2d45884878081ea7131403e69a7768febf317a975f02757d3baa1478d871643a487e8f8116e7f6e836d17042d5c638
- SSDEEP 24576:aqg430VpLP7DhspWcY/0eaEt8MQ2AUFlqtkIjWvriYn0/mswQpP:aqVypr7FspHYVjzFMK+Wje3wQpP
- TLSH T16C75E01BB6A910FDD02DC179C7469232EA71B8460B70B9EF0291D3293E77AE45F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_bf337450a78a9dbd49581e50c0f0ffaa_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_bf337450a78a9dbd49581e50c0f0ffaa_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_bf337450a78a9dbd49581e50c0f0ffaa_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 3cb09011f32b737c359b60884a07571c6f3e94de1b344dfdae113b8eb30fc1a3
- MD5 bf337450a78a9dbd49581e50c0f0ffaa
- SHA1 f44629fcda49c5fdadddc71209e77a98fcee0249
- SHA512 78d85d3ac5d0cd1fa80a6bf17f9e615a2a2d45884878081ea7131403e69a7768febf317a975f02757d3baa1478d871643a487e8f8116e7f6e836d17042d5c638
- SSDEEP 24576:aqg430VpLP7DhspWcY/0eaEt8MQ2AUFlqtkIjWvriYn0/mswQpP:aqVypr7FspHYVjzFMK+Wje3wQpP
- TLSH T16C75E01BB6A910FDD02DC179C7469232EA71B8460B70B9EF0291D3293E77AE45F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory