General
- Target 2026-08-16_b49d0d7c0bedca933da2c3336ef28489_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.1MB
- Sample260816-29ccgabq4v
- SHA256 3e9e0bacbd3a9b5458e5f7f023c61cd315661a6f095b39b737527b3b91491d6c
- MD5 b49d0d7c0bedca933da2c3336ef28489
- SHA1 3253ac94b1a78b7fa0561a8ab0e415ee3850c6f5
- SHA512 95a4d852b596e3ae77cdf666344c526db773b60a4faa6ffbef28088f0a45a7aca107695ac99268cd71d6ccdcde6b9f6d9f02ccf10143c6144cd5f9978b0acc9f
- SSDEEP 12288:ht7GUbRYTapECAKTbkX+hV8BMIhfF7wyOv4qjFtuuoa87wGkimwwJ:zGUpEexIhfF7wy3eDDumr
- TLSH T167356C1676A801F8E1B6D0398952D936E672BC1643609ADF03E07E673F3B7E05E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_b49d0d7c0bedca933da2c3336ef28489_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_b49d0d7c0bedca933da2c3336ef28489_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_b49d0d7c0bedca933da2c3336ef28489_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.1MB
- SHA256 3e9e0bacbd3a9b5458e5f7f023c61cd315661a6f095b39b737527b3b91491d6c
- MD5 b49d0d7c0bedca933da2c3336ef28489
- SHA1 3253ac94b1a78b7fa0561a8ab0e415ee3850c6f5
- SHA512 95a4d852b596e3ae77cdf666344c526db773b60a4faa6ffbef28088f0a45a7aca107695ac99268cd71d6ccdcde6b9f6d9f02ccf10143c6144cd5f9978b0acc9f
- SSDEEP 12288:ht7GUbRYTapECAKTbkX+hV8BMIhfF7wyOv4qjFtuuoa87wGkimwwJ:zGUpEexIhfF7wy3eDDumr
- TLSH T167356C1676A801F8E1B6D0398952D936E672BC1643609ADF03E07E673F3B7E05E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of SetThreadContext