General
- Target 2026-08-02_c9aedc9eec9aec8916faa1947cd074d6_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.3MB
- Sample260802-qzn3qsbl3y
- SHA256 8a0462b616cfd79b2b73cf13474772f2d7e3f57b88f82e9e044f23bca39318e4
- MD5 c9aedc9eec9aec8916faa1947cd074d6
- SHA1 58b7b644bcc9c2149685396136c74af5f237e3fb
- SHA512 c14cdf6c76a605074dbbb5c6101ba694014d3aa401922623420ef273a02131be445b7b3308199778c4ecac0a380efca854cfbd86bca40ee8a31aec0e287532ba
- SSDEEP 12288:f4wFsxeWdcXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:xGSsqjnhMgeiCl7G0nehbGZpbD
- TLSH T1DC55125B739810EAD5774235C5A1960AFB337C2667204BDF03A046B9AF736D09E3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_c9aedc9eec9aec8916faa1947cd074d6_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_c9aedc9eec9aec8916faa1947cd074d6_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.3MB
- SHA256 8a0462b616cfd79b2b73cf13474772f2d7e3f57b88f82e9e044f23bca39318e4
- MD5 c9aedc9eec9aec8916faa1947cd074d6
- SHA1 58b7b644bcc9c2149685396136c74af5f237e3fb
- SHA512 c14cdf6c76a605074dbbb5c6101ba694014d3aa401922623420ef273a02131be445b7b3308199778c4ecac0a380efca854cfbd86bca40ee8a31aec0e287532ba
- SSDEEP 12288:f4wFsxeWdcXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kw:xGSsqjnhMgeiCl7G0nehbGZpbD
- TLSH T1DC55125B739810EAD5774235C5A1960AFB337C2667204BDF03A046B9AF736D09E3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory