2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar
Size 274KB
Sample260815-ppvbbsxsgt
SHA256 80c294b1013ee81fbc3861e35b9d6fe10560c0e400ad277f615e4f62ae20c708
MD5 2b94601f285e293c213f186d61f63e73
SHA1 0510bf8723ddec8cb7f3e5cf61c66b74eb6d5f5b
SHA512 b2fb8009104f8d61d33dea5e4bf9d4f14d95df20299dec99ba884a33f1b30c7e4516fed905e386d88f0fee944e3afbeb8948ea6f4261b7422f6e05f2870cadf6
SSDEEP 6144:fxxmnATc41sT3iVSd87fqCHeohyRDaFsIhBm:Zxmnz41s+VSsfT+ok
TLSH
T19D547B5A77A50CF9E8738239C8524506EA72B8560B75D6BF03A04267DF336E09D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar

.exe 274KB

2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH 7bbb73b9c377ce0c71bea0bb07fb6ef2
SHA256 80c294b1013ee81fbc3861e35b9d6fe10560c0e400ad277f615e4f62ae20c708
MD5 2b94601f285e293c213f186d61f63e73
SHA1 0510bf8723ddec8cb7f3e5cf61c66b74eb6d5f5b
SHA512 b2fb8009104f8d61d33dea5e4bf9d4f14d95df20299dec99ba884a33f1b30c7e4516fed905e386d88f0fee944e3afbeb8948ea6f4261b7422f6e05f2870cadf6
SSDEEP 6144:fxxmnATc41sT3iVSd87fqCHeohyRDaFsIhBm:Zxmnz41s+VSsfT+ok
TLSH
T19D547B5A77A50CF9E8738239C8524506EA72B8560B75D6BF03A04267DF336E09D3FB21
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

35:5c:86:e9:86:c7:99:98:d5:b6:9a:5f:21:70:2f:cc:ac:41:11:4c:2d:80:46:4a:e6:0a:fb:c5:2b:2e:be:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Black Tree Gaming Ltd,O=Black Tree Gaming Ltd,L=Exeter,C=GB

Chains

Aug 11, 2026

CN=Black Tree Gaming Ltd,O=Black Tree Gaming Ltd,L=Exeter,C=GB

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

7b:2c:9b:d3:16:80:32:99

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 12, 2016 - Feb 12, 2041

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

64:33:51:d3:c7:38:9f:08

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 24, 2016 - Jun 24, 2031

Subject

CN=Black Tree Gaming Ltd,O=Black Tree Gaming Ltd,L=Exeter,C=GB

Serial Number

30:27:12:51:d8:d6:a5:c8:fb:ff:ee:95:3c:05:3d:34

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 9, 2024 - Nov 20, 2026

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

36420

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dev\test\x64\Release\test.pdb

kernel32

InitializeCriticalSectionEx CreateToolhelp32Snapshot GetLastError Process32NextW Process32FirstW CloseHandle RaiseException DecodePointer DeleteCriticalSection WideCharToMultiByte WriteConsoleW CreateFileW SetStdHandle IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwindEx RtlPcToFileHeader FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapSize HeapReAlloc HeapFree GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap RtlUnwind

Name

.text

Size

164KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_2b94601f285e293c213f186d61f63e73_cobalt-strike_icedid_njrat_satacom_vidar

kernel32

generic