General
- Target 2026-06-25_7e2164e12b4441741ea4621c87f41684_cobalt-strike_icedid_njrat_satacom_vidar
- Size 697KB
- Sample260629-1b2zssfx4v
- SHA256 cabfc2450848f8b41b52b9d958866c7e8f3bd912b19012e8e923671f5897d167
- MD5 7e2164e12b4441741ea4621c87f41684
- SHA1 ad68f76ba8713f6f1ee2697b0887f99424ee1f69
- SHA512 7489e867efd43c8378e8500dc89b2d3d5c92055bec4751d2faa6f5777febf2aa199aea59eb71d702d98f7a5ae110ddd66f1f1e0b75bff7849fa02b459e73863c
- SSDEEP 12288:7ytbV3kSoXaLnTosllBu9OQuzl72aqfOnhiE7+xF+d2WrYYhgf7:6b5kSYaLTVll49Opg2iLxF+dVY7
- TLSH T10BE4E05676950CF9E9338139C8965602FAB278550B70C7EF03A0876BDF236D0AE3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_7e2164e12b4441741ea4621c87f41684_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_7e2164e12b4441741ea4621c87f41684_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_7e2164e12b4441741ea4621c87f41684_cobalt-strike_icedid_njrat_satacom_vidar
- Size 697KB
- SHA256 cabfc2450848f8b41b52b9d958866c7e8f3bd912b19012e8e923671f5897d167
- MD5 7e2164e12b4441741ea4621c87f41684
- SHA1 ad68f76ba8713f6f1ee2697b0887f99424ee1f69
- SHA512 7489e867efd43c8378e8500dc89b2d3d5c92055bec4751d2faa6f5777febf2aa199aea59eb71d702d98f7a5ae110ddd66f1f1e0b75bff7849fa02b459e73863c
- SSDEEP 12288:7ytbV3kSoXaLnTosllBu9OQuzl72aqfOnhiE7+xF+d2WrYYhgf7:6b5kSYaLTVll49Opg2iLxF+dVY7
- TLSH T10BE4E05676950CF9E9338139C8965602FAB278550B70C7EF03A0876BDF236D0AE3EB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.