2026-09-29_11412dd43b67f65f59a78dbb7b1ee9d3_amadey_cobalt-strike_icedid_njrat_satacom_vidar_wannacry

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_11412dd43b67f65f59a78dbb7b1ee9d3_amadey_cobalt-strike_icedid_njrat_satacom_vidar_wannacry
Size 2.1MB
Sample260930-3ynrssyalh
SHA256 f9ea224703051d4efbd4dc6e476e4b9471cb559d3a5e485c984e8f66e6d6fc5b
MD5 11412dd43b67f65f59a78dbb7b1ee9d3
SHA1 1b81da62062a3d2afb5aea65ea79f557a6d36ad6
SHA512 30806109c63fb2850d2d37ace9984dd6110ec30453944ac92cc977dfad76dcf58bcd1d679b7d0e049f54578cf577a8acb3275c92c0cae8de9d1d70fdb0974456
SSDEEP 24576:q0L25jcAkSYqyEnslZOZpZe0p4Ek4niOkl/A04szE87JKTvm7wdIh7CH:kpYqaGeW4SkZP4sz9MbwhOH
TLSH
T1F3A51819F2B88362D0B7C079CAD6A659FA3338451B708ACB02C5E37C2F376D59975722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_11412dd43b67f65f59a78dbb7b1ee9d3_amadey_cobalt-strike_icedid_njrat_satacom_vidar_wannacry

File Explorer

2026-09-29_11412dd43b67f65f59a78dbb7b1ee9d3_amadey_cobalt-strike_icedid_njrat_satacom_vidar_wannacry

.exe 2.1MB

2026-09-29_11412dd43b67f65f59a78dbb7b1ee9d3_amadey_cobalt-strike_icedid_njrat_satacom_vidar_wannacry

IMPHASH a969854f170b809d5a6120a6757e8a86
SHA256 f9ea224703051d4efbd4dc6e476e4b9471cb559d3a5e485c984e8f66e6d6fc5b
MD5 11412dd43b67f65f59a78dbb7b1ee9d3
SHA1 1b81da62062a3d2afb5aea65ea79f557a6d36ad6
SHA512 30806109c63fb2850d2d37ace9984dd6110ec30453944ac92cc977dfad76dcf58bcd1d679b7d0e049f54578cf577a8acb3275c92c0cae8de9d1d70fdb0974456
SSDEEP 24576:q0L25jcAkSYqyEnslZOZpZe0p4Ek4niOkl/A04szE87JKTvm7wdIh7CH:kpYqaGeW4SkZP4sz9MbwhOH
TLSH
T1F3A51819F2B88362D0B7C079CAD6A659FA3338451B708ACB02C5E37C2F376D59975722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

39152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\dotnet\dotnet.pdb

kernel32

GetFullPathNameW FindNextFileW GetCurrentProcess GetModuleHandleExW GetModuleFileNameW GetEnvironmentVariableW FindClose FindFirstFileExW GetFileAttributesExW LoadLibraryA GetProcAddress DeleteCriticalSection GetModuleHandleW LoadLibraryExW FreeLibrary GetLastError OutputDebugStringW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SwitchToThread GetCurrentThreadId QueryPerformanceCounter GetSystemTimeAsFileTime

api-ms-win-crt-runtime-l1-1-0

terminate _register_thread_local_exe_atexit_callback _c_exit __p___wargv __p___argc _exit exit _initterm_e _initterm _get_initial_wide_environment _initialize_wide_environment _invalid_parameter_noinfo_noreturn _configure_wide_argv _errno _set_app_type _seh_filter_exe _cexit abort _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vswprintf _wfsopen __acrt_iob_func fflush fputwc fputws __stdio_common_vfwprintf _set_fmode __stdio_common_vsnwprintf_s setvbuf

api-ms-win-crt-string-l1-1-0

wcsncmp _wcsicmp strcpy_s

api-ms-win-crt-convert-l1-1-0

_wtoi wcstoul

api-ms-win-crt-time-l1-1-0

_gmtime64_s wcsftime _time64

api-ms-win-crt-heap-l1-1-0

malloc _callnewh _set_new_mode calloc free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_11412dd43b67f65f59a78dbb7b1ee9d3_amadey_cobalt-strike_icedid_njrat_satacom_vidar_wannacry

kernel32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic