2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar

General

Target
2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar
Size 49.1MB
Sample260603-b7g7tsgs21
SHA256 3d7e0274d20c8153c7d8b81ba0e71d8469c333ecc6c04027508a182d66b1621c
MD5 7d0c2006fc5f717c54fd220c404d282e
SHA1 1d8f46ff5cd55d05fa9286fb3b27c73b4fdfcf79
SHA512 b4bc835463eea3a036308284263f88b778ed47e23a2e6e19a3559ac38f2d435931b4ae83a6abb355cd53926d18599808fd649ece922f8a718409994eddef63bd
SSDEEP 1572864:uEHLVl6u0DkBhysgUG5pc85j4A9VcvVO:brVcu0DsysgU+h1n0O
TLSH
T1CFB7330612CDBDC5F8FA4A7263B70BC3E32EACB19555CAAC05A851A1263F5187F15FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar

.exe 49.1MB

2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH 345252df0f18626ea92662a068d0cf38
SHA256 3d7e0274d20c8153c7d8b81ba0e71d8469c333ecc6c04027508a182d66b1621c
MD5 7d0c2006fc5f717c54fd220c404d282e
SHA1 1d8f46ff5cd55d05fa9286fb3b27c73b4fdfcf79
SHA512 b4bc835463eea3a036308284263f88b778ed47e23a2e6e19a3559ac38f2d435931b4ae83a6abb355cd53926d18599808fd649ece922f8a718409994eddef63bd
SSDEEP 1572864:uEHLVl6u0DkBhysgUG5pc85j4A9VcvVO:brVcu0DsysgU+h1n0O
TLSH
T1CFB7330612CDBDC5F8FA4A7263B70BC3E32EACB19555CAAC05A851A1263F5187F15FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

9992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SendMessageA GetKeyState GetWindowRect SetWindowPos EndDialog DialogBoxParamA GetDlgItemTextA MessageBoxA GetDlgItem

advapi32

OpenProcessToken RegCloseKey RegGetValueA RegCreateKeyExA RegSetValueExA AdjustTokenPrivileges

kernel32

GetConsoleOutputCP GetConsoleMode SetFilePointerEx HeapSize HeapReAlloc CreateFileW WriteConsoleW FlushFileBuffers GetModuleHandleW OutputDebugStringA GetCurrentThreadId GetCurrentProcessId GetModuleFileNameA SizeofResource Process32First WriteProcessMemory GetModuleFileNameW FindResourceA GetModuleHandleA OpenProcess CreateToolhelp32Snapshot LockResource Process32Next CloseHandle GetNativeSystemInfo LoadResource GetProcAddress VirtualAllocEx CreateRemoteThread HeapFree LoadLibraryA HeapAlloc GetProcessHeap VirtualFreeEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetFileType LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-03_7d0c2006fc5f717c54fd220c404d282e_cobalt-strike_icedid_njrat_satacom_vidar

user32

advapi32

kernel32

generic