2026-07-10_8a00a6fe4391f6405c3b6429d364d7e5_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-10_8a00a6fe4391f6405c3b6429d364d7e5_cobalt-strike_icedid_njrat_satacom_vidar
Size 160KB
Sample260710-mcm1daav2x
SHA256 8a0c5f128cb0f98dd45a91f296f67da9007fb0c8d81c5ef2e9987518c79e7cdf
MD5 8a00a6fe4391f6405c3b6429d364d7e5
SHA1 699c9af15977e181f61a43c1bb5775b3c15eabf0
SHA512 0816ab2e499d0d301cb801739f9aa7e35771513f94af22d709fe3b20a37cf3a8c3ee0c658a5bd7014ab58c7fec6760f41678ce82b03c1feb68edf851af0d690d
SSDEEP 3072:CysA/VHVRfCr+ML8d60uA2fdMQ3+vOdDjv9/n64G:CPCJCvf0PIhJo4
TLSH
T195F35C5BB3A620F9E1778238C9A21606F77378350761DB9F03A443765F632D0AD3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-10_8a00a6fe4391f6405c3b6429d364d7e5_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-10_8a00a6fe4391f6405c3b6429d364d7e5_cobalt-strike_icedid_njrat_satacom_vidar

.exe 160KB

2026-07-10_8a00a6fe4391f6405c3b6429d364d7e5_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH c21b96c299e8601ba867077aa7fd2eaf
SHA256 8a0c5f128cb0f98dd45a91f296f67da9007fb0c8d81c5ef2e9987518c79e7cdf
MD5 8a00a6fe4391f6405c3b6429d364d7e5
SHA1 699c9af15977e181f61a43c1bb5775b3c15eabf0
SHA512 0816ab2e499d0d301cb801739f9aa7e35771513f94af22d709fe3b20a37cf3a8c3ee0c658a5bd7014ab58c7fec6760f41678ce82b03c1feb68edf851af0d690d
SSDEEP 3072:CysA/VHVRfCr+ML8d60uA2fdMQ3+vOdDjv9/n64G:CPCJCvf0PIhJo4
TLSH
T195F35C5BB3A620F9E1778238C9A21606F77378350761DB9F03A443765F632D0AD3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21316

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

shell32

ShellExecuteExW

user32

GetClientRect SetWindowTextW EndPaint BeginPaint UpdateWindow DrawTextW GetSystemMetrics ShowWindow FillRect RegisterClassExW PostQuitMessage DefWindowProcW PostMessageA SendMessageA DispatchMessageA TranslateMessage GetMessageA LoadCursorA CreateWindowExW

gdi32

MoveToEx SetTextColor SetBkMode SelectObject RoundRect LineTo GetStockObject DeleteObject DeleteDC CreateSolidBrush CreatePen CreateFontW CreateCompatibleDC CreateCompatibleBitmap BitBlt

kernel32

MultiByteToWideChar GetCommandLineW WideCharToMultiByte GetCPInfo GetOEMCP GetACP GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize HeapReAlloc CreateFileW WriteConsoleW GetCommandLineA DeleteFileA GetFileAttributesA GetFileAttributesExA SetFileAttributesA GetTempPathA CloseHandle WaitForSingleObject Sleep CreateProcessA CreateProcessW GetConsoleWindow GetCurrentThreadId QueryPerformanceCounter EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW IsValidCodePage RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess HeapFree HeapAlloc GetFileType LCMapStringW SetFilePointerEx FindClose FindFirstFileExW FindNextFileW

Name

.text

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-10_8a00a6fe4391f6405c3b6429d364d7e5_cobalt-strike_icedid_njrat_satacom_vidar

comctl32

shell32

user32

gdi32

kernel32

generic