General
- Target 2026-07-07_43f38f0621071c0bc725fd4037d4e192_cobalt-strike_icedid_njrat_satacom_vidar
- Size 973KB
- Sample260707-mnw3esf13s
- SHA256 ef594515c474257252f819ec5ad0b813f06698e1cab8e4d93437f3865dbe958c
- MD5 43f38f0621071c0bc725fd4037d4e192
- SHA1 f20e4c7ec0fc991d996dbe8993b339e49b43764e
- SHA512 dd1b38e193d03ea5565fc15f417870c967bd6181f543c76ecd7c72d486a1fae92d8481d6cf6aa35f28cddf22e27cf70dd9ddd9551375e21b588557977b5eb5d2
- SSDEEP 24576:rb5kSYaLTVlCw+CD+F3JN2r4qEUMX18StU0tIAmmwp:rb5k2L50w+WY3erhvMXltU0tt+
- TLSH T10C250159B7A50CF9E877C13988525605FA7278520B30CAEF03A487679F73AD09E3E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_43f38f0621071c0bc725fd4037d4e192_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_43f38f0621071c0bc725fd4037d4e192_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_43f38f0621071c0bc725fd4037d4e192_cobalt-strike_icedid_njrat_satacom_vidar
- Size 973KB
- SHA256 ef594515c474257252f819ec5ad0b813f06698e1cab8e4d93437f3865dbe958c
- MD5 43f38f0621071c0bc725fd4037d4e192
- SHA1 f20e4c7ec0fc991d996dbe8993b339e49b43764e
- SHA512 dd1b38e193d03ea5565fc15f417870c967bd6181f543c76ecd7c72d486a1fae92d8481d6cf6aa35f28cddf22e27cf70dd9ddd9551375e21b588557977b5eb5d2
- SSDEEP 24576:rb5kSYaLTVlCw+CD+F3JN2r4qEUMX18StU0tIAmmwp:rb5k2L50w+WY3erhvMXltU0tt+
- TLSH T10C250159B7A50CF9E877C13988525605FA7278520B30CAEF03A487679F73AD09E3E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.