General
- Target 2026-07-27_e9b8afdce7fef79dcf6085001315ff61_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 455KB
- Sample260727-ss613sbg28
- SHA256 61589bcc23a150143c7c060a6c0858f61920a8c8705ca7ea0ad3032463a71b08
- MD5 e9b8afdce7fef79dcf6085001315ff61
- SHA1 ff43da5b5c51267f645c32266ce11634c8603ce6
- SHA512 09631600b718d4ac3cc6d8a03c2b947d4e640ecc109beb4bf5ff540765a290e6431d9a1323924fbbbbcb7a5776f7db4c155b3aee69035f8d615dc957dbb6bec5
- SSDEEP 12288:QLMEalqxXblqoRX5qbfphLxaO3qX+tWvU:cqaXNabfphLxa4uvU
- TLSH T1A7A48D05E7E909F8E0B7E638D9664902E7773C4A0371968F13AC166B1F63790DE3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_e9b8afdce7fef79dcf6085001315ff61_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_e9b8afdce7fef79dcf6085001315ff61_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_e9b8afdce7fef79dcf6085001315ff61_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 455KB
- SHA256 61589bcc23a150143c7c060a6c0858f61920a8c8705ca7ea0ad3032463a71b08
- MD5 e9b8afdce7fef79dcf6085001315ff61
- SHA1 ff43da5b5c51267f645c32266ce11634c8603ce6
- SHA512 09631600b718d4ac3cc6d8a03c2b947d4e640ecc109beb4bf5ff540765a290e6431d9a1323924fbbbbcb7a5776f7db4c155b3aee69035f8d615dc957dbb6bec5
- SSDEEP 12288:QLMEalqxXblqoRX5qbfphLxaO3qX+tWvU:cqaXNabfphLxa4uvU
- TLSH T1A7A48D05E7E909F8E0B7E638D9664902E7773C4A0371968F13AC166B1F63790DE3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.