General
- Target 2026-07-03_57e95e37c4fe94d74d191f74c531c999_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 997KB
- Sample260703-na4qsacy2q
- SHA256 a1bae37c43aaac55a86fe89be9dca65f6a7ec8b9cb18375136914bcd4209307c
- MD5 57e95e37c4fe94d74d191f74c531c999
- SHA1 5332f1c2cb6e71d60406ad2bb0bd179931ce33f8
- SHA512 8e3228e6e27020b923358c106a95cc1f605e9281aea08e45bbb72689798d7fb1a6809a6f351ec92a913b12a88eafc52ddb7e742f278d4c1f72bab7bbb72b66c6
- SSDEEP 24576:Tx8AgjCjzDiYrd7bqmNFbv0ZjRJIYDlvjwQUYrpJ:TaAgjAXi27bJN52cypcQUSJ
- TLSH T1CB25DF15F69414F8D4A7A134C922C572E6727C4A473097DF23E42E9B7E3B6E08D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-03_57e95e37c4fe94d74d191f74c531c999_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_57e95e37c4fe94d74d191f74c531c999_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260630-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_57e95e37c4fe94d74d191f74c531c999_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 997KB
- SHA256 a1bae37c43aaac55a86fe89be9dca65f6a7ec8b9cb18375136914bcd4209307c
- MD5 57e95e37c4fe94d74d191f74c531c999
- SHA1 5332f1c2cb6e71d60406ad2bb0bd179931ce33f8
- SHA512 8e3228e6e27020b923358c106a95cc1f605e9281aea08e45bbb72689798d7fb1a6809a6f351ec92a913b12a88eafc52ddb7e742f278d4c1f72bab7bbb72b66c6
- SSDEEP 24576:Tx8AgjCjzDiYrd7bqmNFbv0ZjRJIYDlvjwQUYrpJ:TaAgjAXi27bJN52cypcQUSJ
- TLSH T1CB25DF15F69414F8D4A7A134C922C572E6727C4A473097DF23E42E9B7E3B6E08D3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.