3d7e0274d20c8153c7d8b81ba0e71d8469c333ecc6c04027508a182d66b1621c

Analysis

max time kernel
149s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/06/2026, 01:46

Target
2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 49.1MB
Sample260603-b7g7tsgs21
SHA256 3d7e0274d20c8153c7d8b81ba0e71d8469c333ecc6c04027508a182d66b1621c
MD5 7d0c2006fc5f717c54fd220c404d282e
SHA1 1d8f46ff5cd55d05fa9286fb3b27c73b4fdfcf79
SHA512 b4bc835463eea3a036308284263f88b778ed47e23a2e6e19a3559ac38f2d435931b4ae83a6abb355cd53926d18599808fd649ece922f8a718409994eddef63bd
SSDEEP 1572864:uEHLVl6u0DkBhysgUG5pc85j4A9VcvVO:brVcu0DsysgU+h1n0O
TLSH
T1CFB7330612CDBDC5F8FA4A7263B70BC3E32EACB19555CAAC05A851A1263F5187F15FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1644	2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar.exe
1644	2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1644