73446e012d56b5bcd03bb3e38725739381d3c8c6c0569aa05572125f4e16041f

Analysis

max time kernel
166s
max time network
166s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 03:40

Target
2026-07-30_3784b33e2b4775ce61db8bc36d2bbd2d_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 2.8MB
Sample260730-d8l9aabc44
SHA256 73446e012d56b5bcd03bb3e38725739381d3c8c6c0569aa05572125f4e16041f
MD5 3784b33e2b4775ce61db8bc36d2bbd2d
SHA1 ee34bc3f87104283e7e9a72b5492e830ed09d406
SHA512 c83dddac63dcbb2c89bdab5d74d6ff40e68a3328e4c8e9a936a5130bb255faaa9fedf464f2a2865329432249da1455495b7f20863db47a19a8c8cbc9cf9c7163
SSDEEP 49152:28sl3WivlbK7vnLX7z30pxzBny060vnmnM4atqZdd1v+0KrbS:13idzBy0bnmnM4aqTPKrbS
TLSH
T1C9D59E5072BB84D9D272C1349512DB1AC6B1B7425233C22F70296E58EF777832E2DF6A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1280	2026-07-30_3784b33e2b4775ce61db8bc36d2bbd2d_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-30_3784b33e2b4775ce61db8bc36d2bbd2d_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-30_3784b33e2b4775ce61db8bc36d2bbd2d_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1280