Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/08/2026, 07:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe
- Size 10.2MB
- Sample260812-jc11fsythy
- SHA256 8906f830290cae16b3dacbe425d5ea21f768641842d7b50841c3077cce5982fa
- MD5 220b1d9f1bac071511e3850bb43ec04d
- SHA1 db75368629c7e5e9b5fd64c4f79da2f6bb8d06e1
- SHA512 58414f46f51cdd567afbf7ebb2e23e5bf14deae004a0d8fd2d2ae203ebc595c8c8bb7fae111de7c001a872f8aaad16a7f45c111c7b386a8f5d55d4649da2c008
- SSDEEP 3072:MAiXwZfXZgqCvOWLOrC/+53nDl5b7DpvJM9j8er:MoRuXLR+5DlpDmx
- TLSH T16DB64A4BB6E520F5D1B681388992261AF772787233308BDF5760463A5F637E0AD3EB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe - Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe 4676 2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-12_220b1d9f1bac071511e3850bb43ec04d_cobalt-strike_icedid_njrat_satacom_vidar.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4676