2026-07-23_264842c0479428e16b33f836043e73f1_cobalt-strike_icedid_njrat_satacom_vidar

General

Target
2026-07-23_264842c0479428e16b33f836043e73f1_cobalt-strike_icedid_njrat_satacom_vidar
Size 516KB
Sample260724-brglcs1bpd
SHA256 ce359a0863b3ee356602d79afb238b1590bf10291965f23350654a71de4b9f95
MD5 264842c0479428e16b33f836043e73f1
SHA1 1b2c1d1e7cdbeda128f44a61c47b54279c443f95
SHA512 fb3ad714aa4501a214f5a6cc707643c69570d61e9469a1c08a950d77461f5d9df6a7f7779266473856f8017d81f84b48c7abef0697e4f67bd8f973103310f253
SSDEEP 12288:4GbfVAUF/v617aosl5w7F6UGqpluBt3heNRFk9g8Pd:dfqUFX69aVl56TGqDuBt3gR98Pd
TLSH
T141B4CF59B7950CF5D877813988924602FAB278560B71CBEF13A48727DF236D0AE3E760
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_264842c0479428e16b33f836043e73f1_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-23_264842c0479428e16b33f836043e73f1_cobalt-strike_icedid_njrat_satacom_vidar

.exe 516KB

2026-07-23_264842c0479428e16b33f836043e73f1_cobalt-strike_icedid_njrat_satacom_vidar

SHA256 ce359a0863b3ee356602d79afb238b1590bf10291965f23350654a71de4b9f95
MD5 264842c0479428e16b33f836043e73f1
SHA1 1b2c1d1e7cdbeda128f44a61c47b54279c443f95
SHA512 fb3ad714aa4501a214f5a6cc707643c69570d61e9469a1c08a950d77461f5d9df6a7f7779266473856f8017d81f84b48c7abef0697e4f67bd8f973103310f253
SSDEEP 12288:4GbfVAUF/v617aosl5w7F6UGqpluBt3heNRFk9g8Pd:dfqUFX69aVl56TGqDuBt3gR98Pd
TLSH
T141B4CF59B7950CF5D877813988924602FAB278560B71CBEF13A48727DF236D0AE3E760
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

44796

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

167KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

89KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

4KB

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_264842c0479428e16b33f836043e73f1_cobalt-strike_icedid_njrat_satacom_vidar

generic