General
- Target 2026-06-26_d8cbd6ed302473555045459f58594efc_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar
- Size 472KB
- Sample260629-n2f4sses6p
- SHA256 adc78dbdbf1a043a726270c0d80ec71f852907de15f4d003df19723209c7a652
- MD5 d8cbd6ed302473555045459f58594efc
- SHA1 a8eb8cb8b4e05965bcc7a172a2333e09194293f7
- SHA512 fd2fba458ffd2eac5ed9c3143c5075e3b398390501ac46debf7dc24dfd9c82d4f8508bd8d57133f1f655d03aa88fce1435bc427265aa6998218e533f0e2bce54
- SSDEEP 6144:ViYB2nEaKTRnXtTkCgwCzUg/HpjN4IBwu7QTLbpqmHdIvW:Vi4e7WRdTfgwCHKy7GLbbdIvW
- TLSH T1C1A43A90F3E414E8F0B79A3589764511DAB67C5A1B71CE8F03A8661A1F33BD18D39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d8cbd6ed302473555045459f58594efc_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d8cbd6ed302473555045459f58594efc_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d8cbd6ed302473555045459f58594efc_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar
- Size 472KB
- SHA256 adc78dbdbf1a043a726270c0d80ec71f852907de15f4d003df19723209c7a652
- MD5 d8cbd6ed302473555045459f58594efc
- SHA1 a8eb8cb8b4e05965bcc7a172a2333e09194293f7
- SHA512 fd2fba458ffd2eac5ed9c3143c5075e3b398390501ac46debf7dc24dfd9c82d4f8508bd8d57133f1f655d03aa88fce1435bc427265aa6998218e533f0e2bce54
- SSDEEP 6144:ViYB2nEaKTRnXtTkCgwCzUg/HpjN4IBwu7QTLbpqmHdIvW:Vi4e7WRdTfgwCHKy7GLbbdIvW
- TLSH T1C1A43A90F3E414E8F0B79A3589764511DAB67C5A1B71CE8F03A8661A1F33BD18D39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.