General
- Target 2026-08-10_01f5a63eb445549b2584007c7bd2fc5e_cobalt-strike_icedid_njrat_satacom_vidar
- Size 6.7MB
- Sample260810-dm4lfadg73
- SHA256 981f916c0b06de44293961f3dcb659711a3e8d1b0e85998600e4aae5e3457360
- MD5 01f5a63eb445549b2584007c7bd2fc5e
- SHA1 d5ec944d0525c00cf9d1492dc082a1ac9065266e
- SHA512 4838558b46f8fbbb4e13af6da68bfa89e3415fcffe82ae921cc69387f39285611066d3bb7d8af7e8214fc929231e627d8383fe7603b86f5f07b03aabd6011bf5
- SSDEEP 98304:u0k2PA4g+iYLR+nZfufLQHkkkmhIiHjsiOA8bvGAAPm3j++x2YYPEZmWi5i5VEIT:ub2M6Ul2QHqmhIiDxWfzME4lcEIFm7M5
- TLSH T12C6633ABBA560CFDFC23017A81468614E26178496F76C3BF46A49399EF233D49D3A740
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_01f5a63eb445549b2584007c7bd2fc5e_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_01f5a63eb445549b2584007c7bd2fc5e_cobalt-strike_icedid_njrat_satacom_vidar
- Size 6.7MB
- SHA256 981f916c0b06de44293961f3dcb659711a3e8d1b0e85998600e4aae5e3457360
- MD5 01f5a63eb445549b2584007c7bd2fc5e
- SHA1 d5ec944d0525c00cf9d1492dc082a1ac9065266e
- SHA512 4838558b46f8fbbb4e13af6da68bfa89e3415fcffe82ae921cc69387f39285611066d3bb7d8af7e8214fc929231e627d8383fe7603b86f5f07b03aabd6011bf5
- SSDEEP 98304:u0k2PA4g+iYLR+nZfufLQHkkkmhIiHjsiOA8bvGAAPm3j++x2YYPEZmWi5i5VEIT:ub2M6Ul2QHqmhIiDxWfzME4lcEIFm7M5
- TLSH T12C6633ABBA560CFDFC23017A81468614E26178496F76C3BF46A49399EF233D49D3A740
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE