General
- Target 2026-08-11_efef19dfd03fdce08a585e1e051343ac_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.5MB
- Sample260811-la7fkade94
- SHA256 2a7bc2c52492a317f123c91ecae5079702f1fe8de8925482881f336b60f0331d
- MD5 efef19dfd03fdce08a585e1e051343ac
- SHA1 4e0a97c0f3d142fea6ffcb85cc0fad13ac58cee6
- SHA512 7df25c8cc7c117d21484123c8ab8a99bb8bf6ce1c0e2d3d8c26bde39610536c7cfa7ee8557ed6cebc0a6a0887db6d342ae499d3f2bd196482c1ba83fc840238c
- SSDEEP 12288:7AjB/8jHBE6XzdLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:caHBLXzCNyBo4kx929bL3Hnx
- TLSH T1F575F116B3A814F4EDBB927C8E528946EA7578060721D7DF07A081673F33AE09E7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_efef19dfd03fdce08a585e1e051343ac_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_efef19dfd03fdce08a585e1e051343ac_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.5MB
- SHA256 2a7bc2c52492a317f123c91ecae5079702f1fe8de8925482881f336b60f0331d
- MD5 efef19dfd03fdce08a585e1e051343ac
- SHA1 4e0a97c0f3d142fea6ffcb85cc0fad13ac58cee6
- SHA512 7df25c8cc7c117d21484123c8ab8a99bb8bf6ce1c0e2d3d8c26bde39610536c7cfa7ee8557ed6cebc0a6a0887db6d342ae499d3f2bd196482c1ba83fc840238c
- SSDEEP 12288:7AjB/8jHBE6XzdLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:caHBLXzCNyBo4kx929bL3Hnx
- TLSH T1F575F116B3A814F4EDBB927C8E528946EA7578060721D7DF07A081673F33AE09E7E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory