2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar

General

Target
2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar
Size 149KB
Sample260718-htm99aez5z
SHA256 17b66e54ed5ea4e68e701fc75cbb2781ea88a7bee653a919ae054c0d481039c4
MD5 97945368223c21c22e2b6c418be9eed1
SHA1 823a223196f942ee643304249f5403a5b67afc27
SHA512 85cbf5d8446b91d77d73f665196d0935ea18aff3ccb8e34682511bfda8034b5bc33a3bc47aa684373b6d19d644f97f9722f027ba6111cef810c38eba33cfd8a7
SSDEEP 3072:0TUEHEe/whe2jPL+uTQ/y0z93qoZ6JF8:8HEe/whe2zL+uk60zST
TLSH
T1FAE36C1773B430F9E5779235C8A25A06F776B8360B219F5F03A443752F23690AE3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar

.exe 149KB

2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH d9578ea7d59117151532805b343da942
SHA256 17b66e54ed5ea4e68e701fc75cbb2781ea88a7bee653a919ae054c0d481039c4
MD5 97945368223c21c22e2b6c418be9eed1
SHA1 823a223196f942ee643304249f5403a5b67afc27
SHA512 85cbf5d8446b91d77d73f665196d0935ea18aff3ccb8e34682511bfda8034b5bc33a3bc47aa684373b6d19d644f97f9722f027ba6111cef810c38eba33cfd8a7
SSDEEP 3072:0TUEHEe/whe2jPL+uTQ/y0z93qoZ6JF8:8HEe/whe2zL+uk60zST
TLSH
T1FAE36C1773B430F9E5779235C8A25A06F776B8360B219F5F03A443752F23690AE3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileW FlushFileBuffers SetFilePointer WriteFile CloseHandle HeapAlloc HeapFree GetProcessHeap Sleep ExitProcess GetLocalTime GetTickCount VirtualProtect GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW GetModuleHandleExW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW WriteConsoleW

user32

GetRawInputData GetWindowThreadProcessId GetWindowTextW GetForegroundWindow MapVirtualKeyW ToUnicode GetKeyboardState RegisterRawInputDevices DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW DispatchMessageW TranslateMessage GetMessageW GetKeyState

shlwapi

StrStrIW

Name

.text

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-18_97945368223c21c22e2b6c418be9eed1_cobalt-strike_icedid_njrat_satacom_vidar

kernel32

user32

shlwapi

generic