2026-07-12_f6e83238cbc572a69c01b22a6a4ac2fb_cobalt-strike_icedid_njrat_satacom_vidar

General

Target
2026-07-12_f6e83238cbc572a69c01b22a6a4ac2fb_cobalt-strike_icedid_njrat_satacom_vidar
Size 150KB
Sample260712-3pr3vsby7v
SHA256 ed1aa13e4d99a36abfb32728ad5f0c0e2c888aa5b45aeb8fbf45ace79338697a
MD5 f6e83238cbc572a69c01b22a6a4ac2fb
SHA1 ccef0efdf5ac54cc2fd2475f8c5293defbb02b0e
SHA512 16184387f272b0692d7c7874d10ccbf60442070c01a2efa4ac46c1bd3a417012d71f63d7473c47a72f4927c473dab88461978d0a4b2b7ef1f779215c098f28b9
SSDEEP 3072:rTQawrxR6pcWu0Vwr+01VCA2NclndgInXT6VdtR:r2xR6pcWuE501VCDylndgXR
TLSH
T1D4E35B5773A530F9E5B78235C9A11A06F77278311B209BAF03A443765F33291AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_f6e83238cbc572a69c01b22a6a4ac2fb_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-12_f6e83238cbc572a69c01b22a6a4ac2fb_cobalt-strike_icedid_njrat_satacom_vidar

.exe 150KB

2026-07-12_f6e83238cbc572a69c01b22a6a4ac2fb_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH a083bee2a5401125f697c33a23842928
SHA256 ed1aa13e4d99a36abfb32728ad5f0c0e2c888aa5b45aeb8fbf45ace79338697a
MD5 f6e83238cbc572a69c01b22a6a4ac2fb
SHA1 ccef0efdf5ac54cc2fd2475f8c5293defbb02b0e
SHA512 16184387f272b0692d7c7874d10ccbf60442070c01a2efa4ac46c1bd3a417012d71f63d7473c47a72f4927c473dab88461978d0a4b2b7ef1f779215c098f28b9
SSDEEP 3072:rTQawrxR6pcWu0Vwr+01VCA2NclndgInXT6VdtR:r2xR6pcWuE501VCDylndgXR
TLSH
T1D4E35B5773A530F9E5B78235C9A11A06F77278311B209BAF03A443765F33291AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetLastError QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc HeapFree GetProcessHeap Sleep GetCurrentProcessId GetCurrentThreadId GetTickCount GetTickCount64 VirtualProtect FreeLibrary GetModuleHandleA GetModuleHandleW GetProcAddress LoadLibraryA CreateFileW CloseHandle HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo WriteConsoleW

user32

GetRawInputData GetWindowThreadProcessId GetWindowTextW GetForegroundWindow MapVirtualKeyW ToUnicode GetKeyboardState RegisterRawInputDevices DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW DefWindowProcW DispatchMessageW TranslateMessage GetMessageW GetKeyState

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_f6e83238cbc572a69c01b22a6a4ac2fb_cobalt-strike_icedid_njrat_satacom_vidar

kernel32

user32

generic