General
- Target 2026-08-16_c0ff8cf08ec05d3a4f3b80ce8cefbad1_cobalt-strike_icedid_njrat_satacom_vidar
- Size 166KB
- Sample260816-vgr4wssyet
- SHA256 fbf296bdf7e5fa8ba1dedec78804b901ce3308bdc8e5643c0eba5eed8456fc04
- MD5 c0ff8cf08ec05d3a4f3b80ce8cefbad1
- SHA1 a4a29b9fac5ec21e177b5655137d6ba57ec7fb29
- SHA512 1a392f26f821d9d591ea64f4372bb0036115a3fe8e08553a62ce4d8cd7a5ef3befaeb77a032f3b69f67553c0e8d4d9dcec9854a8a839be8e2b6d04e229568c3f
- SSDEEP 3072:1tJ2fCsQiuzYJ8WreWgxgjIFafthDCMfCvovHXrbl5STd:1wCszCYJ8OcgsafzB
- TLSH T1E2F37D4A73E510FDE1778139C9551A05F372782207209BAF07A047BA9F272E1AD3EFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_c0ff8cf08ec05d3a4f3b80ce8cefbad1_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_c0ff8cf08ec05d3a4f3b80ce8cefbad1_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_c0ff8cf08ec05d3a4f3b80ce8cefbad1_cobalt-strike_icedid_njrat_satacom_vidar
- Size 166KB
- SHA256 fbf296bdf7e5fa8ba1dedec78804b901ce3308bdc8e5643c0eba5eed8456fc04
- MD5 c0ff8cf08ec05d3a4f3b80ce8cefbad1
- SHA1 a4a29b9fac5ec21e177b5655137d6ba57ec7fb29
- SHA512 1a392f26f821d9d591ea64f4372bb0036115a3fe8e08553a62ce4d8cd7a5ef3befaeb77a032f3b69f67553c0e8d4d9dcec9854a8a839be8e2b6d04e229568c3f
- SSDEEP 3072:1tJ2fCsQiuzYJ8WreWgxgjIFafthDCMfCvovHXrbl5STd:1wCszCYJ8OcgsafzB
- TLSH T1E2F37D4A73E510FDE1778139C9551A05F372782207209BAF07A047BA9F272E1AD3EFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application