General
- Target 2026-09-29_7c2a890f6441013395c1cadf29a87ada_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- Sample260929-1m879axtbs
- SHA256 1c413b949b6e4cbc1c050222529a0c0414ea066b5eaf1ce4d77f978a2688e5dc
- MD5 7c2a890f6441013395c1cadf29a87ada
- SHA1 544ebbcbe2ffa3e7fc9c63cc73820f4a541cade1
- SHA512 c46685bc685eaa54c597a884786380c287475c67953f2db8432ba2b458260588d31b83a9230947dc3dbf034de2ff0b39d586defb829973fa460bb3225519012e
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhW:EaGrCJ+H5Iht1JCD9aW
- TLSH T12E057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_7c2a890f6441013395c1cadf29a87ada_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_7c2a890f6441013395c1cadf29a87ada_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
bazarloader
C2
-
reddew28c.bazar
Targets
-
- Target 2026-09-29_7c2a890f6441013395c1cadf29a87ada_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- SHA256 1c413b949b6e4cbc1c050222529a0c0414ea066b5eaf1ce4d77f978a2688e5dc
- MD5 7c2a890f6441013395c1cadf29a87ada
- SHA1 544ebbcbe2ffa3e7fc9c63cc73820f4a541cade1
- SHA512 c46685bc685eaa54c597a884786380c287475c67953f2db8432ba2b458260588d31b83a9230947dc3dbf034de2ff0b39d586defb829973fa460bb3225519012e
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhW:EaGrCJ+H5Iht1JCD9aW
- TLSH T12E057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload