General
- Target 2026-07-27_fc5bbce63a35f5257fbb9a55ce079b9e_cobalt-strike_icedid_njrat_satacom_vidar
- Size 13.4MB
- Sample260727-d8d8nsvepe
- SHA256 b2eff2bb4edb45020ab8957fbdcd05aae04c5cf9a1a146c9147844a8ca7673b5
- MD5 fc5bbce63a35f5257fbb9a55ce079b9e
- SHA1 a5f05437a74b40bdad3be953f96847e29cfb18e0
- SHA512 c9b19f4880ae3227ee4762a76dbcd78cdfae5947c8d505ffd89ab4b4c26a2c9d83dc6817800c58e49981e1f5325f3e2807205eec8219b70b2e1a3f4fddb7b536
- SSDEEP 49152:tqLClM2TCFGu9MD2iP2uIBDwjb4dGhA4HfFN7ouaL4Xpru/MbdDceafMJqjhSrm8:Flb8GumD8h4ZrW0FsZCJNKUI8FuO
- TLSH T16CE673E4B1262BA4E437FD35641D7579839A5800FB39E0F788FEEE212664DF408353A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_fc5bbce63a35f5257fbb9a55ce079b9e_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_fc5bbce63a35f5257fbb9a55ce079b9e_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_fc5bbce63a35f5257fbb9a55ce079b9e_cobalt-strike_icedid_njrat_satacom_vidar
- Size 13.4MB
- SHA256 b2eff2bb4edb45020ab8957fbdcd05aae04c5cf9a1a146c9147844a8ca7673b5
- MD5 fc5bbce63a35f5257fbb9a55ce079b9e
- SHA1 a5f05437a74b40bdad3be953f96847e29cfb18e0
- SHA512 c9b19f4880ae3227ee4762a76dbcd78cdfae5947c8d505ffd89ab4b4c26a2c9d83dc6817800c58e49981e1f5325f3e2807205eec8219b70b2e1a3f4fddb7b536
- SSDEEP 49152:tqLClM2TCFGu9MD2iP2uIBDwjb4dGhA4HfFN7ouaL4Xpru/MbdDceafMJqjhSrm8:Flb8GumD8h4ZrW0FsZCJNKUI8FuO
- TLSH T16CE673E4B1262BA4E437FD35641D7579839A5800FB39E0F788FEEE212664DF408353A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.
-
Executes dropped EXE