46d4e2683a6ce934d977c2195b02fa25327a1660b3b1448d52211610c81a5c21

Analysis

max time kernel
150s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 06:02

Target
2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Size 1.4MB
Sample260824-grflysywcx
SHA256 46d4e2683a6ce934d977c2195b02fa25327a1660b3b1448d52211610c81a5c21
MD5 8d7fada214580734cd130aee63ce69c5
SHA1 f64ad5247913ef81d09b0cf6a001ce2118f48f3a
SHA512 b6ecaca5f920ac6acaaed46b091cdc1ee8f98a5a05ed3638c81a00126316435ef655acf393f2bf225867c46311a056bff9e07ce681f179c855adba862a4741d7
SSDEEP 24576:K3PaEJmnuL+83Y+05qR6I/QsYSlcErkleeIxLENuELE4lMFuNsP9ccuE94606mi:6PacL+dqA+QsDToEezNuEFlMFudcue0W
TLSH
T1D565021AA3A851F4D877C239CC424A66E2767C158B60D6CF17E4B21A3F336D09D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Bandizip	2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File created	C:\Program Files\Bandizip\__tmp_rar_sfx_access_check_240751156	2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File created	C:\Program Files\Bandizip\Bandizip.exe	2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Bandizip\Bandizip.exe	2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_8d7fada214580734cd130aee63ce69c5_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe"
1⤵
- Drops file in Program Files directory
PID:2752