General
- Target 2026-07-06_92c1094ef8997b4c7bb12a95c76ba43c_cobalt-strike_icedid_njrat_remcos_satacom_vidar
- Size 898KB
- Sample260707-cpsfhsfz2x
- SHA256 ef0bcb29a8307f0118ac9319a95d86d4f51dac5aa0f50880e5ee25fe402a2167
- MD5 92c1094ef8997b4c7bb12a95c76ba43c
- SHA1 0490e7d1e7cac3e082d1bf9a525b6cbfed8a9fb7
- SHA512 e8eeab3e4136ea6360b18b744ecf37e0f5db489eaf08934a2d8f80b6944c586128dd06b253630ac17078fd60b2577791f5c6c33ef141f4dba4c85486c58857f1
- SSDEEP 24576:f1HkI2FOMYWiXlLOIhXqlZpAplMp0TCbqmSB3EQ:5kI2FOMYW0OIhXqbCplMp0TCbq7tT
- TLSH T11015014A73A91CE9E87781388E528606E7727C510724CBDF1360676BAF776E0AD3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_92c1094ef8997b4c7bb12a95c76ba43c_cobalt-strike_icedid_njrat_remcos_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_92c1094ef8997b4c7bb12a95c76ba43c_cobalt-strike_icedid_njrat_remcos_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_92c1094ef8997b4c7bb12a95c76ba43c_cobalt-strike_icedid_njrat_remcos_satacom_vidar
- Size 898KB
- SHA256 ef0bcb29a8307f0118ac9319a95d86d4f51dac5aa0f50880e5ee25fe402a2167
- MD5 92c1094ef8997b4c7bb12a95c76ba43c
- SHA1 0490e7d1e7cac3e082d1bf9a525b6cbfed8a9fb7
- SHA512 e8eeab3e4136ea6360b18b744ecf37e0f5db489eaf08934a2d8f80b6944c586128dd06b253630ac17078fd60b2577791f5c6c33ef141f4dba4c85486c58857f1
- SSDEEP 24576:f1HkI2FOMYWiXlLOIhXqlZpAplMp0TCbqmSB3EQ:5kI2FOMYW0OIhXqbCplMp0TCbq7tT
- TLSH T11015014A73A91CE9E87781388E528606E7727C510724CBDF1360676BAF776E0AD3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.