General
- Target 2026-05-23_3d9cb58287e7557748c98453d2702dd0_cobalt-strike_icedid_njrat_satacom_stealc_stop_vidar
- Size 2.8MB
- Sample260523-a116pab16w
- SHA256 d3869db9e8e0a06ceae8e2a8d754e6995618e17e123f2b3a2dc2384cb52ff268
- MD5 3d9cb58287e7557748c98453d2702dd0
- SHA1 fe023120078ce24ec69bd24e773cf3dcf3fa4458
- SHA512 c11b402719fedcb1b41d54602795b31c3ca255df0f06899067b12aa7e7b6315197b8a527689e140b51f8ca2c11854bec06f2b09a6e027eaceb7e4f1790a2d6d9
- SSDEEP 49152:S/ev6/3/ev6/+AoQC5b/ev6/3/ev6/+AoQC5SDd79WC7:stvt+5rtvt+5Sp7V
- TLSH T126D55A1977F415A9F6B39A38C96A8251EF72BC211B20D3CF135096691F336E0ED39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_3d9cb58287e7557748c98453d2702dd0_cobalt-strike_icedid_njrat_satacom_stealc_stop_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_3d9cb58287e7557748c98453d2702dd0_cobalt-strike_icedid_njrat_satacom_stealc_stop_vidar.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_3d9cb58287e7557748c98453d2702dd0_cobalt-strike_icedid_njrat_satacom_stealc_stop_vidar
- Size 2.8MB
- SHA256 d3869db9e8e0a06ceae8e2a8d754e6995618e17e123f2b3a2dc2384cb52ff268
- MD5 3d9cb58287e7557748c98453d2702dd0
- SHA1 fe023120078ce24ec69bd24e773cf3dcf3fa4458
- SHA512 c11b402719fedcb1b41d54602795b31c3ca255df0f06899067b12aa7e7b6315197b8a527689e140b51f8ca2c11854bec06f2b09a6e027eaceb7e4f1790a2d6d9
- SSDEEP 49152:S/ev6/3/ev6/+AoQC5b/ev6/3/ev6/+AoQC5SDd79WC7:stvt+5rtvt+5Sp7V
- TLSH T126D55A1977F415A9F6B39A38C96A8251EF72BC211B20D3CF135096691F336E0ED39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.