General
- Target 2026-05-22_cff8e0afe08b0b762bf7ab65f0fa926c_cobalt-strike_icedid_njrat_satacom_stop_vidar_wannacry
- Size 2.7MB
- Sample260523-ank9psby71
- SHA256 9fd959e0efaaff5658ef906e334118668290e735890280efcabf80e5b3bd76d6
- MD5 cff8e0afe08b0b762bf7ab65f0fa926c
- SHA1 ae5150249156e103a7fab63780fc3e0d032a2c54
- SHA512 7713c64116d912cd122e839a86802838e3beb5adf876ec2d6c038682a68bb6f719ebac7864908ffa5655837a3b500776eca418a6db151f278fd020c5112a5fef
- SSDEEP 49152:S/ev6/3/ev6/mDd79WCopO4q7rHbBSUldP0v7f8IUhabas4f7m:stvtmp7AO4q75Av7fbUhabg
- TLSH T1D8D54A2C7DA441B6E4728A35C5A6A599FA3278127B005FCF12D1534E0E3BBD2BD34F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_cff8e0afe08b0b762bf7ab65f0fa926c_cobalt-strike_icedid_njrat_satacom_stop_vidar_wannacry.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_cff8e0afe08b0b762bf7ab65f0fa926c_cobalt-strike_icedid_njrat_satacom_stop_vidar_wannacry.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_cff8e0afe08b0b762bf7ab65f0fa926c_cobalt-strike_icedid_njrat_satacom_stop_vidar_wannacry
- Size 2.7MB
- SHA256 9fd959e0efaaff5658ef906e334118668290e735890280efcabf80e5b3bd76d6
- MD5 cff8e0afe08b0b762bf7ab65f0fa926c
- SHA1 ae5150249156e103a7fab63780fc3e0d032a2c54
- SHA512 7713c64116d912cd122e839a86802838e3beb5adf876ec2d6c038682a68bb6f719ebac7864908ffa5655837a3b500776eca418a6db151f278fd020c5112a5fef
- SSDEEP 49152:S/ev6/3/ev6/mDd79WCopO4q7rHbBSUldP0v7f8IUhabas4f7m:stvtmp7AO4q75Av7fbUhabg
- TLSH T1D8D54A2C7DA441B6E4728A35C5A6A599FA3278127B005FCF12D1534E0E3BBD2BD34F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.