General
- Target 2026-08-10_eaf3c981c9583a1c5eb76072926ddb71_cobalt-strike_icedid_njrat_satacom_vidar
- Size 6.7MB
- Sample260810-a2m1fs11bw
- SHA256 feebc9e7091041290b9eb2fb3bce5e2145d613f69e4e249a2a3031b5dbd744b1
- MD5 eaf3c981c9583a1c5eb76072926ddb71
- SHA1 2d95c5141756d9405753c64f4b82d1a416c239d2
- SHA512 dc7590e2b1e39ea317c1c4b143762b4df99ad1a8efe0aa5851e274719ba1eef9b4cf203eadebc59be6e2892def787db2cc1566de894180ec6c00d264ac484a2a
- SSDEEP 196608:uCmNbp/C0fX+whf9M7v0nIWnoU/TmQMQ5Dw5jj5vIzxbEv/DvA:XYp/Iw9Wv0nIWnTCJQVAjdvIzBE3DvA
- TLSH T13966334AE1751DF8E2E7D2B1C9159520D17338072731C66B47904B9E9F37BB0AF3AA28
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_eaf3c981c9583a1c5eb76072926ddb71_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_eaf3c981c9583a1c5eb76072926ddb71_cobalt-strike_icedid_njrat_satacom_vidar
- Size 6.7MB
- SHA256 feebc9e7091041290b9eb2fb3bce5e2145d613f69e4e249a2a3031b5dbd744b1
- MD5 eaf3c981c9583a1c5eb76072926ddb71
- SHA1 2d95c5141756d9405753c64f4b82d1a416c239d2
- SHA512 dc7590e2b1e39ea317c1c4b143762b4df99ad1a8efe0aa5851e274719ba1eef9b4cf203eadebc59be6e2892def787db2cc1566de894180ec6c00d264ac484a2a
- SSDEEP 196608:uCmNbp/C0fX+whf9M7v0nIWnoU/TmQMQ5Dw5jj5vIzxbEv/DvA:XYp/Iw9Wv0nIWnTCJQVAjdvIzBE3DvA
- TLSH T13966334AE1751DF8E2E7D2B1C9159520D17338072731C66B47904B9E9F37BB0AF3AA28
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE