General
- Target 2026-09-19_11cb68c0f43605a5dfc5414d9fd8f88c_cobalt-strike_icedid_njrat_satacom_vidar
- Size 246KB
- Sample260919-prw8psfd83
- SHA256 f7543746de034b2a8e32096fa3e5b5da1911036ea8ba7b153633e85c0c9a40d7
- MD5 11cb68c0f43605a5dfc5414d9fd8f88c
- SHA1 073e39d8fbdd0973e03553976495d5337e98e745
- SHA512 cbf583c4e0a453c4e24c606f1b888c129be48b3076fbff5d22a80538ef99c9646dd3392159b110a373aa967d93c8a567812e6d9eba8a65268c0b65603cb65dbe
- SSDEEP 3072:heM3BKY8dJ004xH6DBZI6gYn2krsn8O+/Df8n3gkDo4bK+oY466TQfX+CIxLxjYb:hbRULp48DB+6gYn2OsnsANfohwW9PO
- TLSH T1DD346B1973A90CF9E873827DCD525606EA76B8160730DAFF03A443665F276D09E3BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-19_11cb68c0f43605a5dfc5414d9fd8f88c_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_11cb68c0f43605a5dfc5414d9fd8f88c_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_11cb68c0f43605a5dfc5414d9fd8f88c_cobalt-strike_icedid_njrat_satacom_vidar
- Size 246KB
- SHA256 f7543746de034b2a8e32096fa3e5b5da1911036ea8ba7b153633e85c0c9a40d7
- MD5 11cb68c0f43605a5dfc5414d9fd8f88c
- SHA1 073e39d8fbdd0973e03553976495d5337e98e745
- SHA512 cbf583c4e0a453c4e24c606f1b888c129be48b3076fbff5d22a80538ef99c9646dd3392159b110a373aa967d93c8a567812e6d9eba8a65268c0b65603cb65dbe
- SSDEEP 3072:heM3BKY8dJ004xH6DBZI6gYn2krsn8O+/Df8n3gkDo4bK+oY466TQfX+CIxLxjYb:hbRULp48DB+6gYn2OsnsANfohwW9PO
- TLSH T1DD346B1973A90CF9E873827DCD525606EA76B8160730DAFF03A443665F276D09E3BB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.