General
- Target 2026-08-10_9ff8a3eaa0c9dc35fbdf7f305fcfeec6_cobalt-strike_icedid_njrat_satacom_vidar
- Size 6.7MB
- Sample260810-a7ew2assbz
- SHA256 479515f10d29955dbd75f6dd20e46abb779dc004e4c1577f6bb2f201d8bbc547
- MD5 9ff8a3eaa0c9dc35fbdf7f305fcfeec6
- SHA1 474e277841dd3aabcba6135a5bceb0415f3be310
- SHA512 ce4969263d923c21249c0a49158931ed491e852ff7d6739aac8e3cdf324fbdcd944b885aa690e58a1a29fd4848192d77cffb5d645095049f93ff71aafb4541b3
- SSDEEP 196608:u+ZZlyjz+aqZmfRj7D3M/APwEh8o1uqO96b:FPraqZmZj7o/CwEyoVPb
- TLSH T10966336132EF4CFCE062D27989939506E6B1381217718ADF86A9466BCF737405E3DB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_9ff8a3eaa0c9dc35fbdf7f305fcfeec6_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_9ff8a3eaa0c9dc35fbdf7f305fcfeec6_cobalt-strike_icedid_njrat_satacom_vidar
- Size 6.7MB
- SHA256 479515f10d29955dbd75f6dd20e46abb779dc004e4c1577f6bb2f201d8bbc547
- MD5 9ff8a3eaa0c9dc35fbdf7f305fcfeec6
- SHA1 474e277841dd3aabcba6135a5bceb0415f3be310
- SHA512 ce4969263d923c21249c0a49158931ed491e852ff7d6739aac8e3cdf324fbdcd944b885aa690e58a1a29fd4848192d77cffb5d645095049f93ff71aafb4541b3
- SSDEEP 196608:u+ZZlyjz+aqZmfRj7D3M/APwEh8o1uqO96b:FPraqZmZj7o/CwEyoVPb
- TLSH T10966336132EF4CFCE062D27989939506E6B1381217718ADF86A9466BCF737405E3DB32
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE