General
- Target 2026-07-27_461f17f5980f1a2ee758fd5a3bf95a89_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 455KB
- Sample260727-tae1bawejd
- SHA256 91386e8a1a8feb51f4e3cb87a953320723c500f153b6d6ac06f260e1898104e1
- MD5 461f17f5980f1a2ee758fd5a3bf95a89
- SHA1 edd2e9a0891f074d16941a3b4d1c38c9ffff3bd2
- SHA512 9cb3b3bc7474302429368fb8d0ac5ddb0c0c735dcc4484ac959e8ad3e4a18e443ea5b53643b97fa00c198c205bb88dea40d735149e0fd8037f25747276a2ca2f
- SSDEEP 6144:S93bMElglqx6r2tPL4sZbbqJ+Rga+r6C40dbqQpvgAtskxogIo0KT3qX+tWRk:QLMEalqxXblqoRX5qbfphLxaO3qX+tW6
- TLSH T11EA48D05E7E909F8E0B7E638D9664902E7773C4A0371968F13AC166B1F63790DE3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_461f17f5980f1a2ee758fd5a3bf95a89_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_461f17f5980f1a2ee758fd5a3bf95a89_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_461f17f5980f1a2ee758fd5a3bf95a89_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 455KB
- SHA256 91386e8a1a8feb51f4e3cb87a953320723c500f153b6d6ac06f260e1898104e1
- MD5 461f17f5980f1a2ee758fd5a3bf95a89
- SHA1 edd2e9a0891f074d16941a3b4d1c38c9ffff3bd2
- SHA512 9cb3b3bc7474302429368fb8d0ac5ddb0c0c735dcc4484ac959e8ad3e4a18e443ea5b53643b97fa00c198c205bb88dea40d735149e0fd8037f25747276a2ca2f
- SSDEEP 6144:S93bMElglqx6r2tPL4sZbbqJ+Rga+r6C40dbqQpvgAtskxogIo0KT3qX+tWRk:QLMEalqxXblqoRX5qbfphLxaO3qX+tW6
- TLSH T11EA48D05E7E909F8E0B7E638D9664902E7773C4A0371968F13AC166B1F63790DE3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.