General
- Target 2026-08-16_2ddb6f8417c8f27e590095ac2c948464_cobalt-strike_icedid_njrat_satacom_vidar
- Size 546KB
- Sample260817-a84lsazhpf
- SHA256 92460fdf979af41acabb2c855213f599f021298d47fff3a337ec5575defb6acc
- MD5 2ddb6f8417c8f27e590095ac2c948464
- SHA1 8430e5fd65aeadece6e4305cc0273dd5a23e1264
- SHA512 a7273b188063894063df2e5afba58ee5377b0043bbc9ec20105ff63413dcd98769bb3eb525e809188bde545801e82f8e16e71bc71941a7e9a327a86b81ef4e07
- SSDEEP 6144:koIKDrY1bke25VrwiQ3gHP9Iqgoh3l0hPZEncAOEJb/WyIxAwt5pfYNoNoSIT:k4YNS5VwNFoN+PZE9O2bJIC0fDNN
- TLSH T1FFC49D5773A528F9E877813DC8524506E772BC260731CBAF1790667A2F336909E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_2ddb6f8417c8f27e590095ac2c948464_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_2ddb6f8417c8f27e590095ac2c948464_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_2ddb6f8417c8f27e590095ac2c948464_cobalt-strike_icedid_njrat_satacom_vidar
- Size 546KB
- SHA256 92460fdf979af41acabb2c855213f599f021298d47fff3a337ec5575defb6acc
- MD5 2ddb6f8417c8f27e590095ac2c948464
- SHA1 8430e5fd65aeadece6e4305cc0273dd5a23e1264
- SHA512 a7273b188063894063df2e5afba58ee5377b0043bbc9ec20105ff63413dcd98769bb3eb525e809188bde545801e82f8e16e71bc71941a7e9a327a86b81ef4e07
- SSDEEP 6144:koIKDrY1bke25VrwiQ3gHP9Iqgoh3l0hPZEncAOEJb/WyIxAwt5pfYNoNoSIT:k4YNS5VwNFoN+PZE9O2bJIC0fDNN
- TLSH T1FFC49D5773A528F9E877813DC8524506E772BC260731CBAF1790667A2F336909E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1