80c294b1013ee81fbc3861e35b9d6fe10560c0e400ad277f615e4f62ae20c708

Analysis

max time kernel
178s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 12:30

Target
2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 274KB
Sample260815-ppvbbsxsgt
SHA256 80c294b1013ee81fbc3861e35b9d6fe10560c0e400ad277f615e4f62ae20c708
MD5 2b94601f285e293c213f186d61f63e73
SHA1 0510bf8723ddec8cb7f3e5cf61c66b74eb6d5f5b
SHA512 b2fb8009104f8d61d33dea5e4bf9d4f14d95df20299dec99ba884a33f1b30c7e4516fed905e386d88f0fee944e3afbeb8948ea6f4261b7422f6e05f2870cadf6
SSDEEP 6144:fxxmnATc41sT3iVSd87fqCHeohyRDaFsIhBm:Zxmnz41s+VSsfT+ok
TLSH
T19D547B5A77A50CF9E8738239C8524506EA72B8560B75D6BF03A04267DF336E09D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5772	2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar.exe
5772	2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5772