2026-08-08_d53193cec82b2a1ce3420eddff0b58a0_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_d53193cec82b2a1ce3420eddff0b58a0_cobalt-strike_icedid_njrat_satacom_vidar
Size 822KB
Sample260808-xdklrasgme
SHA256 7bd8d58116386382bcadc4237d999fa5737043458b4a10ef28f5a315afc51ba2
MD5 d53193cec82b2a1ce3420eddff0b58a0
SHA1 07763a9b007fd56becda80eb656fb35b05e0937f
SHA512 179a940822e4f5dd9ce356286a50b9e4b8b7f6f288384d077730df262b9d4fd605ec644373839da7df92e66f2c1608bf1cd09d981b6ad2017b830b38bcbb0e56
SSDEEP 12288:mxZ98W+SfQRXnYsWDHrh2decRilm7EFMEluxjhZxmo/WnYQ17V39VBOHmzrJsd:uEW+SfQRosagT0M+uxj7xmSWnhrkqJQ
TLSH
T17605D04672E400F9E0BB9039C956AB17FA727C1606609B9F23E446573FB72605F9F322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_d53193cec82b2a1ce3420eddff0b58a0_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-08-08_d53193cec82b2a1ce3420eddff0b58a0_cobalt-strike_icedid_njrat_satacom_vidar

.exe 822KB

2026-08-08_d53193cec82b2a1ce3420eddff0b58a0_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH 5529c7639ec0ae64113bd692d0fe0b31
SHA256 7bd8d58116386382bcadc4237d999fa5737043458b4a10ef28f5a315afc51ba2
MD5 d53193cec82b2a1ce3420eddff0b58a0
SHA1 07763a9b007fd56becda80eb656fb35b05e0937f
SHA512 179a940822e4f5dd9ce356286a50b9e4b8b7f6f288384d077730df262b9d4fd605ec644373839da7df92e66f2c1608bf1cd09d981b6ad2017b830b38bcbb0e56
SSDEEP 12288:mxZ98W+SfQRXnYsWDHrh2decRilm7EFMEluxjhZxmo/WnYQ17V39VBOHmzrJsd:uEW+SfQRosagT0M+uxj7xmSWnhrkqJQ
TLSH
T17605D04672E400F9E0BB9039C956AB17FA727C1606609B9F23E446573FB72605F9F322
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

262596

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

W:\dev\project-stardust\bin\Release\wehhhh.pdb

d3dx9_43

D3DXCreateTextureFromFileInMemory

d3d9

Direct3DCreate9

kernel32

GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter CreateToolhelp32Snapshot Process32Next OpenProcess CloseHandle Module32Next VirtualAllocEx CreateWaitableTimerExA SetWaitableTimer WaitForSingleObject GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc MultiByteToWideChar GetFileSizeEx GetConsoleOutputCP FlushFileBuffers ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType HeapAlloc HeapFree WriteFile GetStdHandle GetModuleFileNameW ExitProcess ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue GetModuleHandleA WriteProcessMemory VirtualProtectEx ReadProcessMemory TlsAlloc SetLastError SetThreadPriority SetStdHandle HeapSize WriteConsoleW GetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead WaitForSingleObjectEx Sleep GetCurrentThreadId FormatMessageA CreateFileW FindClose FindFirstFileExW FindNextFileW SetEndOfFile SetFilePointerEx AreFileApisANSI RtlUnwind LocalFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW EncodePointer DecodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection LCMapStringEx GetStringTypeW GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent CreateEventW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId

user32

GetKeyState FindWindowA SetWindowsHookExA CallNextHookEx SetClipboardData GetMessageA GetCursorInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent SetCapture SetCursor GetClientRect ReleaseCapture SetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData TranslateMessage DestroyWindow PeekMessageA UpdateWindow ShowWindow UnregisterClassA CreateWindowExA RegisterClassExA GetWindowRect SetWindowPos GetCursorPos DefWindowProcA PostQuitMessage SendInput UnhookWindowsHookEx DispatchMessageA GetForegroundWindow

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

imm32

ImmAssociateContextEx ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_d53193cec82b2a1ce3420eddff0b58a0_cobalt-strike_icedid_njrat_satacom_vidar

d3dx9_43

d3d9

kernel32

user32

shell32

ole32

imm32

generic