General
- Target 2026-07-08_f3bb7e0ab71fefa4b5e3afeeae54acad_cobalt-strike_icedid_njrat_satacom_vidar
- Size 666KB
- Sample260708-tyv2fact8l
- SHA256 3b32f19c4a5d016c66f8141cd3e62bb0b6854fcbba5651e4edebcb2b0ef6d1ec
- MD5 f3bb7e0ab71fefa4b5e3afeeae54acad
- SHA1 bfe32ed1726f1fe0dd4f265bc582e95ee725041e
- SHA512 41ab26aeda26a79bc8a729379138f0aefbf60c47f1ea8605b734418ba6865ce436cf44eeb19d7b6850c37f59ca2d0332f6dc46c7e8d92de8f908a06226a1bf35
- SSDEEP 12288:7ytbV3kSoXaLnTosllTzLB7UFmsv7F8+kKQUghmt9Rwy8MTL:6b5kSYaLTVllTfB7UJa+ktUghmSVM/
- TLSH T126E4E055B3A60CF9E877813888924506FA7278160730DBEF17A48627EF276D0AD3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f3bb7e0ab71fefa4b5e3afeeae54acad_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f3bb7e0ab71fefa4b5e3afeeae54acad_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f3bb7e0ab71fefa4b5e3afeeae54acad_cobalt-strike_icedid_njrat_satacom_vidar
- Size 666KB
- SHA256 3b32f19c4a5d016c66f8141cd3e62bb0b6854fcbba5651e4edebcb2b0ef6d1ec
- MD5 f3bb7e0ab71fefa4b5e3afeeae54acad
- SHA1 bfe32ed1726f1fe0dd4f265bc582e95ee725041e
- SHA512 41ab26aeda26a79bc8a729379138f0aefbf60c47f1ea8605b734418ba6865ce436cf44eeb19d7b6850c37f59ca2d0332f6dc46c7e8d92de8f908a06226a1bf35
- SSDEEP 12288:7ytbV3kSoXaLnTosllTzLB7UFmsv7F8+kKQUghmt9Rwy8MTL:6b5kSYaLTVllTfB7UJa+ktUghmSVM/
- TLSH T126E4E055B3A60CF9E877813888924506FA7278160730DBEF17A48627EF276D0AD3E761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.