General
- Target 2026-06-27_e5a1b98d069b9633d75a128e0cf14148_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 22.5MB
- Sample260629-cazlaaby7m
- SHA256 93334195ca2fe7507aebae2cabd53308df85afc0868d6c831793f936597a9416
- MD5 e5a1b98d069b9633d75a128e0cf14148
- SHA1 620a9bd0bc3bc042da3675f560e6087618ea7a33
- SHA512 3a20a9ce833738e29a53e720e19cf6ef33807f0fb4d3f6ffd11aeffef3f5d408b24dab643065c098833587794e2ca8449910ed20476c9a5a53ba48a87851a82a
- SSDEEP 393216:OJM4o7rtmcujdZPBgPnWZJY84ak5PYBvvh8ktRhSt+eaX7o0Md:OqrP8+PWf4RPYlJytje7oV
- TLSH T1A0373319E3DE19A4E07EA43DD5920313E3B5BC1A43A16E4F076CA62658277F0C93B763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_e5a1b98d069b9633d75a128e0cf14148_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_e5a1b98d069b9633d75a128e0cf14148_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_e5a1b98d069b9633d75a128e0cf14148_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 22.5MB
- SHA256 93334195ca2fe7507aebae2cabd53308df85afc0868d6c831793f936597a9416
- MD5 e5a1b98d069b9633d75a128e0cf14148
- SHA1 620a9bd0bc3bc042da3675f560e6087618ea7a33
- SHA512 3a20a9ce833738e29a53e720e19cf6ef33807f0fb4d3f6ffd11aeffef3f5d408b24dab643065c098833587794e2ca8449910ed20476c9a5a53ba48a87851a82a
- SSDEEP 393216:OJM4o7rtmcujdZPBgPnWZJY84ak5PYBvvh8ktRhSt+eaX7o0Md:OqrP8+PWf4RPYlJytje7oV
- TLSH T1A0373319E3DE19A4E07EA43DD5920313E3B5BC1A43A16E4F076CA62658277F0C93B763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL