General
- Target 2026-04-15_27d9be37768577cbfc9070ef44e95c67_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 13.7MB
- Sample260415-pwjs6sg191
- SHA256 d443d989be09798c5dd06831487ba962c884c6f54fd18d4b05ab1dadeedb9335
- MD5 27d9be37768577cbfc9070ef44e95c67
- SHA1 25e01fda96a86c17190868b10736c4f099deacdc
- SHA512 d4986d278c9bbceeb3d60cd0d6075e0fc41532c07d96bda41aaff3a4975473eb624785aa8cf1174e63fbf4b0419a0878dec8b61fa0601e6a18b116d377719951
- SSDEEP 98304:Sqwn8N+TNKPiXUFyjQoRPpouoqD0CDWT6ZgfhGAZ5HjoEZVRcVP5NFCvJ9FKfj0+:SqwcM
- TLSH T18DE62391FFA6D798C4B1A078FC17886AF7320EE81100D3DD77B456B5DB8B9885E2D128
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_27d9be37768577cbfc9070ef44e95c67_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_27d9be37768577cbfc9070ef44e95c67_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_27d9be37768577cbfc9070ef44e95c67_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 13.7MB
- SHA256 d443d989be09798c5dd06831487ba962c884c6f54fd18d4b05ab1dadeedb9335
- MD5 27d9be37768577cbfc9070ef44e95c67
- SHA1 25e01fda96a86c17190868b10736c4f099deacdc
- SHA512 d4986d278c9bbceeb3d60cd0d6075e0fc41532c07d96bda41aaff3a4975473eb624785aa8cf1174e63fbf4b0419a0878dec8b61fa0601e6a18b116d377719951
- SSDEEP 98304:Sqwn8N+TNKPiXUFyjQoRPpouoqD0CDWT6ZgfhGAZ5HjoEZVRcVP5NFCvJ9FKfj0+:SqwcM
- TLSH T18DE62391FFA6D798C4B1A078FC17886AF7320EE81100D3DD77B456B5DB8B9885E2D128
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE