Analysis

  • max time kernel
    150s
  • max time network
    122s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/06/2026, 23:38

General

  • Target
    2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe
  • Size 11.6MB
  • Sample260629-3m3ftaaz3p
  • SHA256 b3aa928899bb495bbe3cc6aa765c13a1b0ee82908a4e2f42cf1f77f2c7431bd4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
upx

Malware Config

Signatures

  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:5832

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/5832-0-0x0000000180000000-0x0000000180634000-memory.dmp

        memory/5832-10-0x0000000180000000-0x0000000180634000-memory.dmp

        memory/5832-12-0x0000000180000000-0x0000000180634000-memory.dmp

        memory/5832-13-0x0000000180000000-0x0000000180634000-memory.dmp