General
- Target 2026-08-18_d9df415a9f71666d935a53318a9fe6e1_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 857KB
- Sample260818-ym7nbagm71
- SHA256 6fdf4162e5b0119122d25ce1e052e85b2c70950610e14b05b1ba0e09d7334e15
- MD5 d9df415a9f71666d935a53318a9fe6e1
- SHA1 c9d5fb64bfd94e07d586d2829545126a12a8b7ef
- SHA512 bc9bccffb41351edba7a31c048703c8509c2db5b17bff77e36ef673ca88264550490ecbec0a74949d694b011bd07477624d2d4ef8f7ddcb9e7bf3d368a774901
- SSDEEP 24576:K3PaEJmnuL+83Y+HbAcH7WZ+UrvLXla88O:6PacL+oCBaG
- TLSH T1E115E05AB39854F4E837D638CC42455AE6763C168B60CBDF13A4771A3F336A09D3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_d9df415a9f71666d935a53318a9fe6e1_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_d9df415a9f71666d935a53318a9fe6e1_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 857KB
- SHA256 6fdf4162e5b0119122d25ce1e052e85b2c70950610e14b05b1ba0e09d7334e15
- MD5 d9df415a9f71666d935a53318a9fe6e1
- SHA1 c9d5fb64bfd94e07d586d2829545126a12a8b7ef
- SHA512 bc9bccffb41351edba7a31c048703c8509c2db5b17bff77e36ef673ca88264550490ecbec0a74949d694b011bd07477624d2d4ef8f7ddcb9e7bf3d368a774901
- SSDEEP 24576:K3PaEJmnuL+83Y+HbAcH7WZ+UrvLXla88O:6PacL+oCBaG
- TLSH T1E115E05AB39854F4E837D638CC42455AE6763C168B60CBDF13A4771A3F336A09D3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Query Registry
3Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1