2026-07-15_42d3712c5f259da1bc22953d17d6717f_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-15_42d3712c5f259da1bc22953d17d6717f_cobalt-strike_icedid_njrat_satacom_vidar
Size 1.5MB
Sample260715-pdcbdaft2y
SHA256 147901380d832ce50e034751c11120d567592dafab16e257c45ad741c0446472
MD5 42d3712c5f259da1bc22953d17d6717f
SHA1 9cfc143326378f73a1f8bd1ecd39b06c48ad8f67
SHA512 da5721f269ef3b5940768399cc715482745d05b17d4e45166b9e580de8e941908e6125b8c565bd67ed4f962e779c4e9af5158fed6a072e8038ffa95fa83fc091
SSDEEP 24576:eDxMBUtYy5T+v8zVW76r0KA3qHwg4xteLG:eVMBirXch/3qHiXeLG
TLSH
T14765F109B2A900F9E977C23C89928506E67278570371DAEF03A147673F776E0AD3E761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-15_42d3712c5f259da1bc22953d17d6717f_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-15_42d3712c5f259da1bc22953d17d6717f_cobalt-strike_icedid_njrat_satacom_vidar

.exe 1.5MB

2026-07-15_42d3712c5f259da1bc22953d17d6717f_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH b74313742e74bdf534f6df605f90bbc6
SHA256 147901380d832ce50e034751c11120d567592dafab16e257c45ad741c0446472
MD5 42d3712c5f259da1bc22953d17d6717f
SHA1 9cfc143326378f73a1f8bd1ecd39b06c48ad8f67
SHA512 da5721f269ef3b5940768399cc715482745d05b17d4e45166b9e580de8e941908e6125b8c565bd67ed4f962e779c4e9af5158fed6a072e8038ffa95fa83fc091
SSDEEP 24576:eDxMBUtYy5T+v8zVW76r0KA3qHwg4xteLG:eVMBirXch/3qHiXeLG
TLSH
T14765F109B2A900F9E977C23C89928506E67278570371DAEF03A147673F776E0AD3E761
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

59948

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shlwapi

ord219

kernel32

UnhandledExceptionFilter WriteConsoleW GetEnvironmentVariableW CloseHandle GetLastError Sleep CreateProcessW FormatMessageW HeapSize ReadConsoleW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage LocalFree FormatMessageA WideCharToMultiByte MultiByteToWideChar GetStringTypeW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileInformationByHandle GetFullPathNameW SetFilePointerEx AreFileApisANSI GetFileInformationByHandleEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwind SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType SetStdHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile HeapReAlloc

user32

AllowSetForegroundWindow GetWindowThreadProcessId

ole32

CreateBindCtx GetRunningObjectTable CoRegisterMessageFilter CoInitialize

oleaut32

SysAllocString SysFreeString

Name

.text

Size

185KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-15_42d3712c5f259da1bc22953d17d6717f_cobalt-strike_icedid_njrat_satacom_vidar

shlwapi

kernel32

user32

ole32

oleaut32

generic