General
- Target 2026-07-27_5d5369fa7d570013f82087f5445fdfcd_cobalt-strike_icedid_njrat_satacom_vidar
- Size 13.3MB
- Sample260727-eb7z6avfkb
- SHA256 b574a17d655bb4660294b8e7beaeeae268cda2bc9c3ded80fcc76ceb7f6d9ad2
- MD5 5d5369fa7d570013f82087f5445fdfcd
- SHA1 82adfbf9142f7b0228c721db4ccfb4e39db399e0
- SHA512 fd971211a7dce58094d04ecbc6078eafbf60a2437635ea12d0746be3fe2434925b487600d4d6f3410e94a0e1a215e47273c88157c86fb09dd21f218eeece79b0
- SSDEEP 49152:VClM2TCFGu9MD2iP2uIBDwjb4dGhA4HfFN7ouaL4Xpru/MbdDceafMJqjhSrmpt8:0lb8GumD8h4ZrW0FsZCJNKUI8FuO
- TLSH T103E673E4B1262BA4E437FD35641D7579839A5900FB38E0F788FEEE212664DF408353A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_5d5369fa7d570013f82087f5445fdfcd_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_5d5369fa7d570013f82087f5445fdfcd_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_5d5369fa7d570013f82087f5445fdfcd_cobalt-strike_icedid_njrat_satacom_vidar
- Size 13.3MB
- SHA256 b574a17d655bb4660294b8e7beaeeae268cda2bc9c3ded80fcc76ceb7f6d9ad2
- MD5 5d5369fa7d570013f82087f5445fdfcd
- SHA1 82adfbf9142f7b0228c721db4ccfb4e39db399e0
- SHA512 fd971211a7dce58094d04ecbc6078eafbf60a2437635ea12d0746be3fe2434925b487600d4d6f3410e94a0e1a215e47273c88157c86fb09dd21f218eeece79b0
- SSDEEP 49152:VClM2TCFGu9MD2iP2uIBDwjb4dGhA4HfFN7ouaL4Xpru/MbdDceafMJqjhSrmpt8:0lb8GumD8h4ZrW0FsZCJNKUI8FuO
- TLSH T103E673E4B1262BA4E437FD35641D7579839A5900FB38E0F788FEEE212664DF408353A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Enumerates VirtualBox registry keys
-
Looks for VMWare services registry key.