General
- Target 2026-08-11_be15146d6d12e221859c1eaa64eb7473_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- Sample260811-lch6rawvfz
- SHA256 a60cfac2daee1158812e14c41f0d468cc5438e76f9945c3c417252f34ccad408
- MD5 be15146d6d12e221859c1eaa64eb7473
- SHA1 52766c6f9a82e5352e918666599ac89a12e28d1a
- SHA512 e8a3f734bdf09db1fd22c006975ebf9810048f4028ec1c37aa3d677bf468f9683e4a6c7dc91ece07eae3488facdc708493880649d2fd99b8840d0f149c160349
- SSDEEP 12288:0VgR8oWJiqkoHg9UeLTpoyPcvLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53T:fP5qkoHgyeLTpzXNyBo4kx929bL3Hnx
- TLSH T1E575AD1AA6A843E5C0BAD1388952E53AF9713C56433097DB17D17F2B3F72BE1993A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_be15146d6d12e221859c1eaa64eb7473_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_be15146d6d12e221859c1eaa64eb7473_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.6MB
- SHA256 a60cfac2daee1158812e14c41f0d468cc5438e76f9945c3c417252f34ccad408
- MD5 be15146d6d12e221859c1eaa64eb7473
- SHA1 52766c6f9a82e5352e918666599ac89a12e28d1a
- SHA512 e8a3f734bdf09db1fd22c006975ebf9810048f4028ec1c37aa3d677bf468f9683e4a6c7dc91ece07eae3488facdc708493880649d2fd99b8840d0f149c160349
- SSDEEP 12288:0VgR8oWJiqkoHg9UeLTpoyPcvLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53T:fP5qkoHgyeLTpzXNyBo4kx929bL3Hnx
- TLSH T1E575AD1AA6A843E5C0BAD1388952E53AF9713C56433097DB17D17F2B3F72BE1993A700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory