General
- Target 2026-04-26_d67cf426d1f893ea91712796b9db56ba_cobalt-strike_icedid_njrat_satacom_stop_vidar
- Size 1.8MB
- Sample260426-tz34faft2n
- SHA256 e8bb79a837093f5ae3edb8e700e7aec91b7d69e247f49c1a09fbd32b35edb004
- MD5 d67cf426d1f893ea91712796b9db56ba
- SHA1 4e9bcb16201443a6cdbe26e77d084d2746c01505
- SHA512 68556a4ab2389832f9c37d5883c9ec8deb0d3d44844476b0015e3977298d9edbaec2ffe4adf219974af58f9b5201bf4e4adfdb16975ab8916a2e34890ef07cd0
- SSDEEP 24576:/jm/ev6IslZOZnjm/ev6IslZOZWafDd70iTWCut1+qw9:S/ev6/3/ev6/mDd79WC8wqS
- TLSH T1A1958C1037F40C76F2B7553A8A7695009E76BD660B24D2CF22E4466E6F337C0AD3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_d67cf426d1f893ea91712796b9db56ba_cobalt-strike_icedid_njrat_satacom_stop_vidar.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_d67cf426d1f893ea91712796b9db56ba_cobalt-strike_icedid_njrat_satacom_stop_vidar.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_d67cf426d1f893ea91712796b9db56ba_cobalt-strike_icedid_njrat_satacom_stop_vidar
- Size 1.8MB
- SHA256 e8bb79a837093f5ae3edb8e700e7aec91b7d69e247f49c1a09fbd32b35edb004
- MD5 d67cf426d1f893ea91712796b9db56ba
- SHA1 4e9bcb16201443a6cdbe26e77d084d2746c01505
- SHA512 68556a4ab2389832f9c37d5883c9ec8deb0d3d44844476b0015e3977298d9edbaec2ffe4adf219974af58f9b5201bf4e4adfdb16975ab8916a2e34890ef07cd0
- SSDEEP 24576:/jm/ev6IslZOZnjm/ev6IslZOZWafDd70iTWCut1+qw9:S/ev6/3/ev6/mDd79WC8wqS
- TLSH T1A1958C1037F40C76F2B7553A8A7695009E76BD660B24D2CF22E4466E6F337C0AD3AB52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.