General
- Target 2026-07-01_b8d2d2c6e036aa73e772c1aafd1ddd38_cobalt-strike_icedid_njrat_satacom_vidar
- Size 697KB
- Sample260702-btngpahs9l
- SHA256 5a558d6e44cf55ced80fac629f5c5e667d84b0c57614f365acae718bbc333266
- MD5 b8d2d2c6e036aa73e772c1aafd1ddd38
- SHA1 841b58e27ba4e5dde9c022a9163212c148696b9a
- SHA512 835a0e15c895c3d0ff9e3bab27d0c8489ef1508448579555c4ca37668944e20f97134d7986ded52e6519da4e316278ebffd4f81438fb5df652d79e667e3da774
- SSDEEP 12288:7ytbV3kSoXaLnTosllBu0FDU2iJFUOSJH/gMBmHdo3VXku+U9bOcVqjA:6b5kSYaLTVll44bi4OSJ/gfdCUu+U9qk
- TLSH T104E4E055B7A50CF9E877813A88825602F67278510770DBEF13A4876ADF236D0AE3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_b8d2d2c6e036aa73e772c1aafd1ddd38_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_b8d2d2c6e036aa73e772c1aafd1ddd38_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_b8d2d2c6e036aa73e772c1aafd1ddd38_cobalt-strike_icedid_njrat_satacom_vidar
- Size 697KB
- SHA256 5a558d6e44cf55ced80fac629f5c5e667d84b0c57614f365acae718bbc333266
- MD5 b8d2d2c6e036aa73e772c1aafd1ddd38
- SHA1 841b58e27ba4e5dde9c022a9163212c148696b9a
- SHA512 835a0e15c895c3d0ff9e3bab27d0c8489ef1508448579555c4ca37668944e20f97134d7986ded52e6519da4e316278ebffd4f81438fb5df652d79e667e3da774
- SSDEEP 12288:7ytbV3kSoXaLnTosllBu0FDU2iJFUOSJH/gMBmHdo3VXku+U9bOcVqjA:6b5kSYaLTVll44bi4OSJ/gfdCUu+U9qk
- TLSH T104E4E055B7A50CF9E877813A88825602F67278510770DBEF13A4876ADF236D0AE3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.