General
- Target 2026-09-12_493453fd11978b6e84b4956c93d464e7_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.2MB
- Sample260913-cvasnadh43
- SHA256 648353807281c1f08d82e8d038792c04993c13d30463e193afd2313f03092bf7
- MD5 493453fd11978b6e84b4956c93d464e7
- SHA1 c4127cdb5c72745b3fd9a8ec087d0a2a5f763286
- SHA512 d3ee41f6d826a9ffdd67fcc88117c0bfc5c137f0c96f15cea7b7e0529b425d8a7a568a966cfca0dd51a653dafc6b63d8203530565dfa3f2885e318ba708c515a
- SSDEEP 24576:KZTN7O4u333HckETHkUoE+E4nVOeqOeTL:Kd5O4u3nFqdV4Vb1U
- TLSH T1EB456C0C7AF1E5A3C82542B0A99046BAF3212CB9EF53A3773B5DB63144371A15D2D27E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-12_493453fd11978b6e84b4956c93d464e7_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_493453fd11978b6e84b4956c93d464e7_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_493453fd11978b6e84b4956c93d464e7_cobalt-strike_icedid_njrat_satacom_vidar
- Size 1.2MB
- SHA256 648353807281c1f08d82e8d038792c04993c13d30463e193afd2313f03092bf7
- MD5 493453fd11978b6e84b4956c93d464e7
- SHA1 c4127cdb5c72745b3fd9a8ec087d0a2a5f763286
- SHA512 d3ee41f6d826a9ffdd67fcc88117c0bfc5c137f0c96f15cea7b7e0529b425d8a7a568a966cfca0dd51a653dafc6b63d8203530565dfa3f2885e318ba708c515a
- SSDEEP 24576:KZTN7O4u333HckETHkUoE+E4nVOeqOeTL:Kd5O4u3nFqdV4Vb1U
- TLSH T1EB456C0C7AF1E5A3C82542B0A99046BAF3212CB9EF53A3773B5DB63144371A15D2D27E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Adds policy Run key to start application
-
Executes dropped EXE
-
Loads dropped DLL