General
- Target 2026-07-22_d2762144bc1476001258e3fb328eaed9_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.4MB
- Sample260722-vg754sdk9y
- SHA256 112b11e3d0a7620656c86d876ba02fc56e9de6b751bba9e2e423c8194fe5abb7
- MD5 d2762144bc1476001258e3fb328eaed9
- SHA1 c1d853d80bbdd029529e2d7ac3aa56db72bd8c27
- SHA512 2c8746b25907dfe08715abb0a0b71a0a18a1467ef7ffc5e7132cd78580313b9e17b38f3251d463827f7e9dacd13fbb326ad7849ec82099713f2ada14a26c16d4
- SSDEEP 12288:DHjJbk5jmK61DSQSwM+XHREYd/6YiUcXbTDaY6atGyqmgpYk1GEOcc7xWiQXZoOT:DLGQNM+XxZLcvDaktGy2CcYaqOCDUd
- TLSH T1C065F106B3AC3CEDE16B8235893554A19B32FC311750A65F53F57B262E32193BD2AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_d2762144bc1476001258e3fb328eaed9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_d2762144bc1476001258e3fb328eaed9_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.4MB
- SHA256 112b11e3d0a7620656c86d876ba02fc56e9de6b751bba9e2e423c8194fe5abb7
- MD5 d2762144bc1476001258e3fb328eaed9
- SHA1 c1d853d80bbdd029529e2d7ac3aa56db72bd8c27
- SHA512 2c8746b25907dfe08715abb0a0b71a0a18a1467ef7ffc5e7132cd78580313b9e17b38f3251d463827f7e9dacd13fbb326ad7849ec82099713f2ada14a26c16d4
- SSDEEP 12288:DHjJbk5jmK61DSQSwM+XHREYd/6YiUcXbTDaY6atGyqmgpYk1GEOcc7xWiQXZoOT:DLGQNM+XxZLcvDaktGy2CcYaqOCDUd
- TLSH T1C065F106B3AC3CEDE16B8235893554A19B32FC311750A65F53F57B262E32193BD2AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory