General
- Target 2026-08-15_30ef2fb86c03e272380fd61b8ea3b32e_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 22.7MB
- Sample260815-jn857ssxes
- SHA256 e0283cbc7e1e033f8a85749b59553bb2fbe671123bcdb198396d06d515368333
- MD5 30ef2fb86c03e272380fd61b8ea3b32e
- SHA1 633c5fb6a35f8c7e5d41579d458526770e5fc82b
- SHA512 38a4b5af6fa9d34d01b7412bab9b8451be6e88e7e6d886ec29c818bf7dc4317fa9d9421002738fca8a508d989b960b611ecf989bdbb7e9b7550652d581c7dc38
- SSDEEP 393216:gI4+J9c8svN7JHRKJJokpVUEMiV4oDFkcfOaV4Xfu2e94KUW2Lzg8LW4HH:g6c8svpJxKJJokAWeyFROau2nQLBLW4n
- TLSH T1BD373398FBD24EF6D675FA70894B6804D6B43C6A63E0C9DF574007292FAB390ED29701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_30ef2fb86c03e272380fd61b8ea3b32e_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_30ef2fb86c03e272380fd61b8ea3b32e_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_30ef2fb86c03e272380fd61b8ea3b32e_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 22.7MB
- SHA256 e0283cbc7e1e033f8a85749b59553bb2fbe671123bcdb198396d06d515368333
- MD5 30ef2fb86c03e272380fd61b8ea3b32e
- SHA1 633c5fb6a35f8c7e5d41579d458526770e5fc82b
- SHA512 38a4b5af6fa9d34d01b7412bab9b8451be6e88e7e6d886ec29c818bf7dc4317fa9d9421002738fca8a508d989b960b611ecf989bdbb7e9b7550652d581c7dc38
- SSDEEP 393216:gI4+J9c8svN7JHRKJJokpVUEMiV4oDFkcfOaV4Xfu2e94KUW2Lzg8LW4HH:g6c8svpJxKJJokAWeyFROau2nQLBLW4n
- TLSH T1BD373398FBD24EF6D675FA70894B6804D6B43C6A63E0C9DF574007292FAB390ED29701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE