2026-07-02_8342a39cd5422e916d00dbaa6b04ab8d_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-02_8342a39cd5422e916d00dbaa6b04ab8d_cobalt-strike_icedid_njrat_satacom_vidar
Size 1.3MB
Sample260702-nhndrsgz21
SHA256 18b42dd6eae46b8f7272930bd78ffeebde1814d4d6011c9e1042295c6f167535
MD5 8342a39cd5422e916d00dbaa6b04ab8d
SHA1 cc90dd8a17ece134c2f1c891081e2d078484417a
SHA512 30b09f6184438a80ed382b051163ce943487b53517c74ec33574e329c5ec1ad40ba11cbef12b006d0ec0c9df462171c2a01dc99e2fa86322ef27a698c8e36caa
SSDEEP 12288:fDA9ndd9Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:2RsqjnhMgeiCl7G0nehbGZpbD
TLSH
T1A055126B739830F9E1724675C5A29109FB337C3617204B9F07A4927A6F772909F3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-02_8342a39cd5422e916d00dbaa6b04ab8d_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-02_8342a39cd5422e916d00dbaa6b04ab8d_cobalt-strike_icedid_njrat_satacom_vidar

.exe 1.3MB

2026-07-02_8342a39cd5422e916d00dbaa6b04ab8d_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH e7afd4f68e877dada106c2f2f5fe9268
SHA256 18b42dd6eae46b8f7272930bd78ffeebde1814d4d6011c9e1042295c6f167535
MD5 8342a39cd5422e916d00dbaa6b04ab8d
SHA1 cc90dd8a17ece134c2f1c891081e2d078484417a
SHA512 30b09f6184438a80ed382b051163ce943487b53517c74ec33574e329c5ec1ad40ba11cbef12b006d0ec0c9df462171c2a01dc99e2fa86322ef27a698c8e36caa
SSDEEP 12288:fDA9ndd9Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:2RsqjnhMgeiCl7G0nehbGZpbD
TLSH
T1A055126B739830F9E1724675C5A29109FB337C3617204B9F07A4927A6F772909F3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24620

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegSetValueExW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW

msi

ord70 ord90 ord137 ord88 ord205 ord173 ord45 ord190 ord111 ord238 ord169 ord141

api-ms-win-core-path-l1-1-0

PathCchRemoveBackslash

kernel32

SetFilePointer WriteFile CloseHandle GetLastError InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetCurrentProcessId GetCurrentThreadId GetLocalTime GetModuleFileNameW lstrlenA GetComputerNameW ExpandEnvironmentStringsW CreateDirectoryW GetFullPathNameW GetTempPathW Sleep MultiByteToWideChar WideCharToMultiByte LCMapStringW GetSystemDirectoryW LoadLibraryW FindClose SetFilePointerEx GlobalAlloc GlobalFree HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap FindNextFileW GetFileAttributesW GetSystemTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformation WriteConsoleW GetConsoleMode GetConsoleCP FlushFileBuffers lstrlenW GetProcAddress FreeLibrary CompareStringW GetModuleHandleW CreateFileW GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetFileType GetCommandLineW GetCommandLineA GetModuleHandleExW ExitProcess GetStdHandle QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RaiseException

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-02_8342a39cd5422e916d00dbaa6b04ab8d_cobalt-strike_icedid_njrat_satacom_vidar

advapi32

msi

api-ms-win-core-path-l1-1-0

kernel32

version

generic