2026-07-30_a38439ea54a43ce3ddae70be4bfa103a_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_a38439ea54a43ce3ddae70be4bfa103a_cobalt-strike_icedid_njrat_satacom_vidar
Size 1.4MB
Sample260730-vrrk4sshna
SHA256 e0e9e896f28eb2e030904e3e1ea41ee59a2be25975c78cd7145a7d16195800db
MD5 a38439ea54a43ce3ddae70be4bfa103a
SHA1 f002dc7e01bd13f997f0106f6afb3b1c22136d31
SHA512 7f108ec2d58c68c5b01fa7369acb01b35f63f3aedf86bc800a19c21d01f3445603f9f26cc8ba2315fc8d34ca758e1fa0e95a7ce0f63ea6e95dd941c7aebc8722
SSDEEP 12288:/pWNw8tM1dtM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:BWNwNd6mctvE/BT76+1NCE
TLSH
T184651293726630F5D8B74374C9919242F77278F626264B9F0364426B6E332909E2FF72
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_a38439ea54a43ce3ddae70be4bfa103a_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-07-30_a38439ea54a43ce3ddae70be4bfa103a_cobalt-strike_icedid_njrat_satacom_vidar

.exe 1.4MB

2026-07-30_a38439ea54a43ce3ddae70be4bfa103a_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH 43b0e43041fea64cb7d5abdc5c097468
SHA256 e0e9e896f28eb2e030904e3e1ea41ee59a2be25975c78cd7145a7d16195800db
MD5 a38439ea54a43ce3ddae70be4bfa103a
SHA1 f002dc7e01bd13f997f0106f6afb3b1c22136d31
SHA512 7f108ec2d58c68c5b01fa7369acb01b35f63f3aedf86bc800a19c21d01f3445603f9f26cc8ba2315fc8d34ca758e1fa0e95a7ce0f63ea6e95dd941c7aebc8722
SSDEEP 12288:/pWNw8tM1dtM6hct28uP18WR/FW2Gb8JTCMMK7LIFYJ1WroCrwah4:BWNwNd6mctvE/BT76+1NCE
TLSH
T184651293726630F5D8B74374C9919242F77278F626264B9F0364426B6E332909E2FF72
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11468

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiEnumDeviceInfo SetupDiGetClassDevsA SetupDiGetDeviceRegistryPropertyA SetupCopyOEMInfW SetupDiSetDeviceRegistryPropertyA

kernel32

GetFileSizeEx ReadFile SetLastError GetFullPathNameW WriteFile WaitForSingleObject GetVersionExW GetModuleHandleA CreateEventW MultiByteToWideChar SetFilePointerEx GetLastError CreateFileA SetEvent LoadLibraryA CloseHandle GetOverlappedResult GetProcAddress FreeLibrary WideCharToMultiByte FormatMessageA GetConsoleMode HeapSize HeapReAlloc CreateFileW WriteConsoleW Sleep EnterCriticalSection GetConsoleOutputCP FlushFileBuffers RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW RaiseException GetModuleHandleExW GetStdHandle GetModuleFileNameW ExitProcess GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap

advapi32

RegQueryValueExA RegCreateKeyExA RegSetValueExA ConvertStringSidToSidA RegDeleteValueA RegCloseKey

ole32

CoInitializeEx CoCreateInstance

Name

.text

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_a38439ea54a43ce3ddae70be4bfa103a_cobalt-strike_icedid_njrat_satacom_vidar

newdev

setupapi

kernel32

advapi32

ole32

generic