General
- Target 2026-09-08_eb4676093dce55fd392b83629a05b2a2_cobalt-strike_njrat_satacom_vidar
- Size 1.5MB
- Sample260910-ccwmeacm81
- SHA256 f0a46186aa0ec5fd197482cc54d32cac903ca8b4d5c8b7c497996ea100cec1c1
- MD5 eb4676093dce55fd392b83629a05b2a2
- SHA1 4d141cae9ca34644c66c5631e28811faba7fe371
- SHA512 697e78359f2e9807f567092b48e471a338d59d9f5fd17e8afdec002574daf1112dda1b94af609fdce52a8fb182d66ad7216cdd37a4db0dfc116f886ce7a2325b
- SSDEEP 12288:ILqPgvI0uA6bu22qH9+bB0OmH7TkKhar9E5pZCX4FlRzgRwCY4+11iLy7mxpIzG:6q4vIhu22C9+bmOmbTk3reZCIT59z7m
- TLSH T1CE650247B7A9C5FDC07A923852425412F379B40A1B2057CF3396466EEF76BE0AE36702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-08_eb4676093dce55fd392b83629a05b2a2_cobalt-strike_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_eb4676093dce55fd392b83629a05b2a2_cobalt-strike_njrat_satacom_vidar
- Size 1.5MB
- SHA256 f0a46186aa0ec5fd197482cc54d32cac903ca8b4d5c8b7c497996ea100cec1c1
- MD5 eb4676093dce55fd392b83629a05b2a2
- SHA1 4d141cae9ca34644c66c5631e28811faba7fe371
- SHA512 697e78359f2e9807f567092b48e471a338d59d9f5fd17e8afdec002574daf1112dda1b94af609fdce52a8fb182d66ad7216cdd37a4db0dfc116f886ce7a2325b
- SSDEEP 12288:ILqPgvI0uA6bu22qH9+bB0OmH7TkKhar9E5pZCX4FlRzgRwCY4+11iLy7mxpIzG:6q4vIhu22C9+bmOmbTk3reZCIT59z7m
- TLSH T1CE650247B7A9C5FDC07A923852425412F379B40A1B2057CF3396466EEF76BE0AE36702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory