General
- Target 2026-08-20_a8cd5ebc9178a1c1820c7936e7e2d511_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 459KB
- Sample260820-dk13jayemg
- SHA256 45717ed7fb0e56acbc53863ba1ab82648f7a9f818306674368cc4e926d678d22
- MD5 a8cd5ebc9178a1c1820c7936e7e2d511
- SHA1 147f0cc1eb1dcdf0e1b89a535e50f516d36b2c57
- SHA512 8d563eb9d315dc1ac7e840da1e49fa2a5273cdb59c1d275a27cb18d0620b2ed65536e39f3bc0769bf1a461df14e2eaa74bfb10e570e1fa1f1fcd0d69083c2502
- SSDEEP 6144:hAELUPajm1wFf+8vpA5XlNHfWiknC5LWGHe81RfYjWvl2bsc5UrJB:hA3ParQ8vp+LfWdnuL+83YTD2JB
- TLSH T1D9A48D4AB39454F4E837D538CC424666E6767C168B60DB9F13A4772A3F332E09E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a8cd5ebc9178a1c1820c7936e7e2d511_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a8cd5ebc9178a1c1820c7936e7e2d511_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a8cd5ebc9178a1c1820c7936e7e2d511_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 459KB
- SHA256 45717ed7fb0e56acbc53863ba1ab82648f7a9f818306674368cc4e926d678d22
- MD5 a8cd5ebc9178a1c1820c7936e7e2d511
- SHA1 147f0cc1eb1dcdf0e1b89a535e50f516d36b2c57
- SHA512 8d563eb9d315dc1ac7e840da1e49fa2a5273cdb59c1d275a27cb18d0620b2ed65536e39f3bc0769bf1a461df14e2eaa74bfb10e570e1fa1f1fcd0d69083c2502
- SSDEEP 6144:hAELUPajm1wFf+8vpA5XlNHfWiknC5LWGHe81RfYjWvl2bsc5UrJB:hA3ParQ8vp+LfWdnuL+83YTD2JB
- TLSH T1D9A48D4AB39454F4E837D538CC424666E6767C168B60DB9F13A4772A3F332E09E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.