2026-07-23_d70b0d49ee1627923e83092499201e4e_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_d70b0d49ee1627923e83092499201e4e_cobalt-strike_icedid_njrat_satacom_vidar
Size 1.9MB
Sample260723-semqaaep6s
SHA256 53e71fbd3d0c9a71e407784345753c74412519dc4d9047febc68de79cb7f30c7
MD5 d70b0d49ee1627923e83092499201e4e
SHA1 b76f612cc5ac61f0e4e0febf52ff14bcebfd7617
SHA512 ae511e0d293b36eaec0c540c2288f1265da6d06851b0ceb828ab79b0743139b7008bf59548a90f862e7bfc673d99b5cd42f121435c2751fbaec86dd3ca1fbf46
SSDEEP 24576:S7ooPz4xSKu0wpMIsqjnhMgeiCl7G0nehbGZpbD:S7oocJH0Dmg27RnWGj
TLSH
T1A495E045A75C08D9EC6E49398993D67AD432BC254390CBC757B8376A6F331E0AE3CB60
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_d70b0d49ee1627923e83092499201e4e_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-23_d70b0d49ee1627923e83092499201e4e_cobalt-strike_icedid_njrat_satacom_vidar

.exe 1.9MB

2026-07-23_d70b0d49ee1627923e83092499201e4e_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH d69de555c26b07d83e6055b53007b483
SHA256 53e71fbd3d0c9a71e407784345753c74412519dc4d9047febc68de79cb7f30c7
MD5 d70b0d49ee1627923e83092499201e4e
SHA1 b76f612cc5ac61f0e4e0febf52ff14bcebfd7617
SHA512 ae511e0d293b36eaec0c540c2288f1265da6d06851b0ceb828ab79b0743139b7008bf59548a90f862e7bfc673d99b5cd42f121435c2751fbaec86dd3ca1fbf46
SSDEEP 24576:S7ooPz4xSKu0wpMIsqjnhMgeiCl7G0nehbGZpbD:S7oocJH0Dmg27RnWGj
TLSH
T1A495E045A75C08D9EC6E49398993D67AD432BC254390CBC757B8376A6F331E0AE3CB60
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

77520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\qb\workspace\21461\source\output\dump64\gfxui\Starter\GfxStarter\Release\GfxUIEx.pdb

kernel32

GlobalHandle GlobalFree MulDiv lstrcmpW lstrcmpiW MultiByteToWideChar HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap CreateProcessW GetSystemDirectoryW FindResourceExW WriteConsoleW ReadConsoleW ReadFile SetEndOfFile GetTimeZoneInformation GetConsoleMode GetConsoleOutputCP FlushFileBuffers CreateFileW SetFilePointerEx GetFileSizeEx GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GlobalLock LCMapStringW CompareStringW WaitForSingleObject FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetModuleHandleExW ExitProcess WriteFile GetStdHandle VirtualQuery VirtualProtect GetSystemInfo TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwindEx RtlPcToFileHeader GetStartupInfoW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WaitForSingleObjectEx ResetEvent InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GlobalUnlock GlobalAlloc FindResourceW SizeofResource LockResource LoadResource LoadLibraryExW GetProcAddress GetModuleHandleW GetModuleFileNameW FreeLibrary GetCurrentThreadId CreateThread Sleep CreateEventW CreateMutexW SetEvent DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection SetLastError GetLastError RaiseException CloseHandle DecodePointer LocalFree WideCharToMultiByte LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache GetCurrentProcess InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer OutputDebugStringW IsDebuggerPresent GetCommandLineW

user32

RegisterWindowMessageW GetMessageW TranslateMessage DispatchMessageW SendMessageW PostThreadMessageW DefWindowProcW CallWindowProcW UnregisterClassW RegisterClassExW GetClassInfoExW CreateWindowExW IsWindow IsChild DestroyWindow MoveWindow SetWindowPos CreateDialogIndirectParamW GetDlgItem CharUpperW CharNextW SetFocus GetFocus SetCapture ReleaseCapture CreateAcceleratorTableW DestroyAcceleratorTable GetDC ReleaseDC BeginPaint EndPaint InvalidateRect InvalidateRgn RedrawWindow SetWindowTextW GetWindowTextW PostQuitMessage SystemParametersInfoW MapDialogRect SetWindowContextHelpId GetWindowTextLengthW SetTimer SendDlgItemMessageW EndDialog IsWindowVisible ShowWindow GetMonitorInfoW MonitorFromWindow LoadCursorW GetWindow GetClassNameW GetParent GetDesktopWindow SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW GetWindowLongW FillRect GetSysColor MapWindowPoints ScreenToClient ClientToScreen GetWindowRect GetClientRect KillTimer

gdi32

SetDIBColorTable CreateDIBSection SetTextColor SetLayout SetBkMode CreateFontW GetObjectW SelectObject GetStockObject GetDeviceCaps DeleteObject DeleteDC CreateSolidBrush CreateCompatibleDC CreateCompatibleBitmap BitBlt

advapi32

RegOpenKeyExW RegCreateKeyExW RegQueryValueExW RegSetValueExW RegQueryInfoKeyW RegCloseKey RegEnumKeyExW RegDeleteValueW RegDeleteKeyW

ole32

CoInitialize CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc StringFromGUID2 CLSIDFromProgID CLSIDFromString CoCreateInstance CoReleaseServerProcess CoResumeClassObjects CoRevokeClassObject CoRegisterClassObject CoGetClassObject CoUninitialize CreateStreamOnHGlobal OleLockRunning OleRun OleUninitialize OleInitialize CoAddRefServerProcess

oleaut32

GetErrorInfo SysAllocString SysAllocStringLen SysFreeString SysStringLen SafeArrayGetDim SafeArrayGetUBound VariantInit VariantClear VarUI4FromStr LoadTypeLi LoadRegTypeLi RegisterTypeLi UnRegisterTypeLi OleCreateFontIndirect SysStringByteLen SysAllocStringByteLen

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiOpenDevRegKey SetupDiEnumDeviceInfo

gdiplus

GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePalette GdipGetImagePaletteSize GdipCreateBitmapFromStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits

comctl32

InitCommonControlsEx

Name

.text

Size

192KB

Virtual Size

191KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

184KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_d70b0d49ee1627923e83092499201e4e_cobalt-strike_icedid_njrat_satacom_vidar

kernel32

user32

gdi32

advapi32

ole32

oleaut32

setupapi

gdiplus

comctl32

generic