General
- Target 2026-08-11_df56836d0dffd2016e1b761dfd1f8f73_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- Sample260811-lbpl5sbm8s
- SHA256 c5ebd9d40219886248d8ec3fdea59dadc47812439a600a99626f57bf25857223
- MD5 df56836d0dffd2016e1b761dfd1f8f73
- SHA1 e39f49cef7639968115c95e8b2007a591c10df85
- SHA512 13c93b5500978182f1c168c747a0e825aed0185bd3ecd51e8770e2856dab4868e987b4fb364e2eebd14a27fc842115eb00ba77ba6ac2a1ea77eedad6d660dfdf
- SSDEEP 12288:LVgR8oWJiqkoHg9UeLTpoyPccLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53T:OP5qkoHgyeLTpz4NyBo4kx929bL3Hnx
- TLSH T13F75AD1AA6A843E1C0BAD1388952E53AF9713C56433097DB17D17F2B3F72BE1993A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_df56836d0dffd2016e1b761dfd1f8f73_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_df56836d0dffd2016e1b761dfd1f8f73_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- SHA256 c5ebd9d40219886248d8ec3fdea59dadc47812439a600a99626f57bf25857223
- MD5 df56836d0dffd2016e1b761dfd1f8f73
- SHA1 e39f49cef7639968115c95e8b2007a591c10df85
- SHA512 13c93b5500978182f1c168c747a0e825aed0185bd3ecd51e8770e2856dab4868e987b4fb364e2eebd14a27fc842115eb00ba77ba6ac2a1ea77eedad6d660dfdf
- SSDEEP 12288:LVgR8oWJiqkoHg9UeLTpoyPccLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53T:OP5qkoHgyeLTpz4NyBo4kx929bL3Hnx
- TLSH T13F75AD1AA6A843E1C0BAD1388952E53AF9713C56433097DB17D17F2B3F72BE1993A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory