2026-09-19_438638a2e52961eb6d92ef7d3ebc0e61_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-19_438638a2e52961eb6d92ef7d3ebc0e61_cobalt-strike_icedid_njrat_satacom_vidar
Size 565KB
Sample260919-d3mb4aae53
SHA256 735c9967c1b7713565a3a255d960d9100cbaf55b697f0a30cb33f776a35ba607
MD5 438638a2e52961eb6d92ef7d3ebc0e61
SHA1 23724f126a506e004db13d10514247472c45b3fb
SHA512 ac69fcb389b5f868a5494cb8d01649d8018f52be182ae86e09a94f224e969d7d1b79356b49f46dce369dc63b13df6e3c0d0fb83b3a591fe8cba1598bcd569fe4
SSDEEP 6144:OBQQ0hYlrYC/3neuCkKPcQWMKdp6cqWZX4YWMjYWqlPanEywg0ghTwG/bHNd0jHA:OBOqlrYCPbCeddp6c/ZX4YWJW0PKV0SB
TLSH
T1A8C4D866DA32FA14C74F24392444A87FC6A71E186CF0872DC750DF29494BED05B6E2FA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-19_438638a2e52961eb6d92ef7d3ebc0e61_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-09-19_438638a2e52961eb6d92ef7d3ebc0e61_cobalt-strike_icedid_njrat_satacom_vidar

.exe 565KB

2026-09-19_438638a2e52961eb6d92ef7d3ebc0e61_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH bf6ad49afb6596985bb97fde8ab15623
SHA256 735c9967c1b7713565a3a255d960d9100cbaf55b697f0a30cb33f776a35ba607
MD5 438638a2e52961eb6d92ef7d3ebc0e61
SHA1 23724f126a506e004db13d10514247472c45b3fb
SHA512 ac69fcb389b5f868a5494cb8d01649d8018f52be182ae86e09a94f224e969d7d1b79356b49f46dce369dc63b13df6e3c0d0fb83b3a591fe8cba1598bcd569fe4
SSDEEP 6144:OBQQ0hYlrYC/3neuCkKPcQWMKdp6cqWZX4YWMjYWqlPanEywg0ghTwG/bHNd0jHA:OBOqlrYCPbCeddp6c/ZX4YWJW0PKV0SB
TLSH
T1A8C4D866DA32FA14C74F24392444A87FC6A71E186CF0872DC750DF29494BED05B6E2FA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7948

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ClipCursor

kernel32

ExitProcess WriteConsoleW CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle InitializeSListHead QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CreateFileW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetFileType GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc

Name

.text

Size

94KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

264KB

Virtual Size

268KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata2

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-19_438638a2e52961eb6d92ef7d3ebc0e61_cobalt-strike_icedid_njrat_satacom_vidar

user32

kernel32

generic