e3d38aebaa237d9604b2a68a35aa09960060d690b3d15e24058ea6cf4ab53f1f

Analysis

max time kernel
148s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 16:56

Target
2026-08-20_dece349270ee5a22031b5d7f85c9ba18_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Size 822KB
Sample260820-vf28gaef28
SHA256 e3d38aebaa237d9604b2a68a35aa09960060d690b3d15e24058ea6cf4ab53f1f
MD5 dece349270ee5a22031b5d7f85c9ba18
SHA1 b07bb198f00cc8317ef8fd8020a87eedaed16273
SHA512 6a8bff868d7431861306753ac4b02b9a6b9f6052dfaac8d342e9555cf48ca0ac5aa843e3a22d3915c55e69c420d4e945b0a20f0991000a8c2d94ead35b1e04d8
SSDEEP 12288:iD3JeU7vinrmNyPz5L84yPz5L8wND3JeU7vinrmgF:iD5TvinrmkzyZzywND5TvinrmgF
TLSH
T18905280662995FA5D66F9134CC924A52E7737C624F204BEF03607F7A3E326D0AE39613
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3704	2026-08-20_dece349270ee5a22031b5d7f85c9ba18_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
3704	2026-08-20_dece349270ee5a22031b5d7f85c9ba18_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_dece349270ee5a22031b5d7f85c9ba18_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_dece349270ee5a22031b5d7f85c9ba18_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3704