Analysis
- max time kernel
150s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 23:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target 2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe
- Size 11.6MB
- Sample260629-3m3ftaaz3p
- SHA256 b3aa928899bb495bbe3cc6aa765c13a1b0ee82908a4e2f42cf1f77f2c7431bd4
- MD5 22889f57f0c2ef905488a5f448d9f591
- SHA1 b8ec484178d2e4790f5386c8fe002d506fa9cc28
- SHA512 d95afe7bbdefa1dfb68fa8e972d0279217b7574c900f6e8a660244284e41255dcca92d216fba269182687d349a5e09d3a905e900f57da50d43f84aefde1242db
- SSDEEP 196608:8wp8T9AqYO/p56brrKqA1uKpiOo0NU2kC2gq7gFLOyomFHKnP:AGnW5WvAcwYwF
- TLSH T1DEC6E19E36DC11E4D06AC074D567A91BE3B37C0A033197DF21E57B962F736A00E6AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5832-0-0x0000000180000000-0x0000000180634000-memory.dmp upx behavioral2/memory/5832-10-0x0000000180000000-0x0000000180634000-memory.dmp upx behavioral2/memory/5832-12-0x0000000180000000-0x0000000180634000-memory.dmp upx behavioral2/memory/5832-13-0x0000000180000000-0x0000000180634000-memory.dmp upx - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5832 2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe 5832 2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-25_22889f57f0c2ef905488a5f448d9f591_cobalt-strike_icedid_megazord_njrat_satacom_vidar.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:5832