General
- Target 2026-07-05_6a38c1cbecd1786e8a9ed511a8b6dd85_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar
- Size 472KB
- Sample260705-c8wmaacv4n
- SHA256 2701fccbce37e1273804d20de94d995293a9135baf956c5b89947456de19a18b
- MD5 6a38c1cbecd1786e8a9ed511a8b6dd85
- SHA1 a1cc78a43dafa3f0bc05b890ac767534d61f922f
- SHA512 041a91aaed8625734723061166d2bb8971b6de1710019c6fc2480d3b8cca443062fdb50ef2c7aa8adb9ff3bbd1afd3689e76d6ff3c45ffe7b119e6db4faed5db
- SSDEEP 6144:ViYB2nEaKTRnXtTkCgwCzUg/HpjN4IBwu7QTLbpqmHdIvW:Vi4e7WRdTfgwCHKy7GLbbdIvW
- TLSH T11AA43A90F3E414E8F0B79A3589764511DAB67C5A1B71CE8F03A8661A1F33BD18D39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-05_6a38c1cbecd1786e8a9ed511a8b6dd85_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_6a38c1cbecd1786e8a9ed511a8b6dd85_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_6a38c1cbecd1786e8a9ed511a8b6dd85_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar
- Size 472KB
- SHA256 2701fccbce37e1273804d20de94d995293a9135baf956c5b89947456de19a18b
- MD5 6a38c1cbecd1786e8a9ed511a8b6dd85
- SHA1 a1cc78a43dafa3f0bc05b890ac767534d61f922f
- SHA512 041a91aaed8625734723061166d2bb8971b6de1710019c6fc2480d3b8cca443062fdb50ef2c7aa8adb9ff3bbd1afd3689e76d6ff3c45ffe7b119e6db4faed5db
- SSDEEP 6144:ViYB2nEaKTRnXtTkCgwCzUg/HpjN4IBwu7QTLbpqmHdIvW:Vi4e7WRdTfgwCHKy7GLbbdIvW
- TLSH T11AA43A90F3E414E8F0B79A3589764511DAB67C5A1B71CE8F03A8661A1F33BD18D39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.