General
- Target 2026-06-27_6bcf40389f553aaedb20a1755502b70e_cloudeye_cobalt-strike_icedid_njrat_satacom_vidar
- Size 19.0MB
- Sample260629-g6z9xae14t
- SHA256 fc3fae481704c67363986b677b6a3492df5f77e56d2a5cb199a4d430924a4772
- MD5 6bcf40389f553aaedb20a1755502b70e
- SHA1 ea62e417bc0049eb7ac2d3b1c2ff0db1cf04f5a7
- SHA512 1aa312f0b340554ef7ff1996d31c42ba9817340c55f5416d1601cb6ae56039aff4ceea018ad93b6ab29efb9d0463aed2cea5bee1b95de59d98d5129bad32a222
- SSDEEP 393216:XWgzoXtUqa00qnljtWJR0KxKOvpcVvp4xtHbmu8zm3fNTQBEcB:mgzGtUF/CjIDHxcVvwbl8q3FcOc
- TLSH T1F417331627F404DAEA5BDD39EAD2CA85D773380142B5E7BF4794422A1F273A0AC3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-27_6bcf40389f553aaedb20a1755502b70e_cloudeye_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_6bcf40389f553aaedb20a1755502b70e_cloudeye_cobalt-strike_icedid_njrat_satacom_vidar
- Size 19.0MB
- SHA256 fc3fae481704c67363986b677b6a3492df5f77e56d2a5cb199a4d430924a4772
- MD5 6bcf40389f553aaedb20a1755502b70e
- SHA1 ea62e417bc0049eb7ac2d3b1c2ff0db1cf04f5a7
- SHA512 1aa312f0b340554ef7ff1996d31c42ba9817340c55f5416d1601cb6ae56039aff4ceea018ad93b6ab29efb9d0463aed2cea5bee1b95de59d98d5129bad32a222
- SSDEEP 393216:XWgzoXtUqa00qnljtWJR0KxKOvpcVvp4xtHbmu8zm3fNTQBEcB:mgzGtUF/CjIDHxcVvwbl8q3FcOc
- TLSH T1F417331627F404DAEA5BDD39EAD2CA85D773380142B5E7BF4794422A1F273A0AC3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL