General
- Target 2026-11-02_dc27d3e6b41ba9645a63dbaad3bfddd2_cobalt-strike_icedid_njrat_vidar
- Size 474KB
- Sample261102-zp14zsds41
- SHA256 145bc1ecbe458f3128fbcd6f6ce098b54619ed5c62ad80a46af4bb0dfecf30c6
- MD5 dc27d3e6b41ba9645a63dbaad3bfddd2
- SHA1 28b613e94c42031626d099636257ebe3df213a97
- SHA512 0a952339810e3b064d5e38185100e4c81747adedac7681644b45dfc90943c6accbf6e57d5d72b832ee766bfced8b48f1448ca2e1748cf845490bce079a6e97a5
- SSDEEP 6144:mOjlZ3taG9h3Hp02Bshx8xZJMIjGI0P2iig1e17nx02tzp4Phl7zLiZr8I:miZ9aG9h372QKYiiOCxpdK6YI
- TLSH T10BA46C5A635408F5D1679239CA53460BE37278045BA1D7CF12A8E3BE2F236D19E3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_dc27d3e6b41ba9645a63dbaad3bfddd2_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_dc27d3e6b41ba9645a63dbaad3bfddd2_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-02_dc27d3e6b41ba9645a63dbaad3bfddd2_cobalt-strike_icedid_njrat_vidar
- Size 474KB
- SHA256 145bc1ecbe458f3128fbcd6f6ce098b54619ed5c62ad80a46af4bb0dfecf30c6
- MD5 dc27d3e6b41ba9645a63dbaad3bfddd2
- SHA1 28b613e94c42031626d099636257ebe3df213a97
- SHA512 0a952339810e3b064d5e38185100e4c81747adedac7681644b45dfc90943c6accbf6e57d5d72b832ee766bfced8b48f1448ca2e1748cf845490bce079a6e97a5
- SSDEEP 6144:mOjlZ3taG9h3Hp02Bshx8xZJMIjGI0P2iig1e17nx02tzp4Phl7zLiZr8I:miZ9aG9h372QKYiiOCxpdK6YI
- TLSH T10BA46C5A635408F5D1679239CA53460BE37278045BA1D7CF12A8E3BE2F236D19E3EF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.