General
- Target 2026-07-08_931fc4a6696481551252862da0e8451c_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.5MB
- Sample260708-vydylaew31
- SHA256 b8712d62bdd349b43d2bb6732d0d4e0d681686b9d2c29339cdee0ef6d7ca4509
- MD5 931fc4a6696481551252862da0e8451c
- SHA1 b3f52342df49a2781d34f61fd6567fd09e845e6b
- SHA512 16fdbbf4a41b3c4935e8d247fafd0c1380aeea4881095910c51ec442fa222ed6eacf9853edef25ae9c7bf6ba2ce1c2d5a44f5f6132f47b20d1bcf3918e0665df
- SSDEEP 24576:SH2iK6P25/q70ZsqjnhMgeiCl7G0nehbGZpbD:TiKqY/qwdDmg27RnWGj
- TLSH T1DF75E12AF36811F6D867C17CCA82C50BEA327C1547205ADB17B096AA3F376D46E3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_931fc4a6696481551252862da0e8451c_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_931fc4a6696481551252862da0e8451c_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_931fc4a6696481551252862da0e8451c_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.5MB
- SHA256 b8712d62bdd349b43d2bb6732d0d4e0d681686b9d2c29339cdee0ef6d7ca4509
- MD5 931fc4a6696481551252862da0e8451c
- SHA1 b3f52342df49a2781d34f61fd6567fd09e845e6b
- SHA512 16fdbbf4a41b3c4935e8d247fafd0c1380aeea4881095910c51ec442fa222ed6eacf9853edef25ae9c7bf6ba2ce1c2d5a44f5f6132f47b20d1bcf3918e0665df
- SSDEEP 24576:SH2iK6P25/q70ZsqjnhMgeiCl7G0nehbGZpbD:TiKqY/qwdDmg27RnWGj
- TLSH T1DF75E12AF36811F6D867C17CCA82C50BEA327C1547205ADB17B096AA3F376D46E3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.