17b66e54ed5ea4e68e701fc75cbb2781ea88a7bee653a919ae054c0d481039c4

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 07:01

Target
2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 149KB
Sample260718-htm99aez5z
SHA256 17b66e54ed5ea4e68e701fc75cbb2781ea88a7bee653a919ae054c0d481039c4
MD5 97945368223c21c22e2b6c418be9eed1
SHA1 823a223196f942ee643304249f5403a5b67afc27
SHA512 85cbf5d8446b91d77d73f665196d0935ea18aff3ccb8e34682511bfda8034b5bc33a3bc47aa684373b6d19d644f97f9722f027ba6111cef810c38eba33cfd8a7
SSDEEP 3072:0TUEHEe/whe2jPL+uTQ/y0z93qoZ6JF8:8HEe/whe2zL+uk60zST
TLSH
T1FAE36C1773B430F9E5779235C8A25A06F776B8360B219F5F03A443752F23690AE3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4136	2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar.exe
4136	2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4136