General
- Target 2026-09-29_550cac159b57224ed384931db9fae8fc_cobalt-strike_icedid_njrat_satacom_vidar
- Size 849KB
- Sample260930-a73yvsvbqa
- SHA256 19b7ae32876c1903bb2cd81233d024bc9771f0b57d64a0aa194f99ab9ea4b74c
- MD5 550cac159b57224ed384931db9fae8fc
- SHA1 534dec88f264f03f4e4f8e89e712b4134413f324
- SHA512 10e20a42eea8ed0af76fcbf2de528cda308e611a19b886f11c8dc3e5166d1757f1dcc73724d0891420deb81012ab8c25d5a5555902d246380d8632455a6760c6
- SSDEEP 24576:ge7JUtiaEGVkvqCJ+H5Ih9Xtlm0wVOPMMCEJI8r:TRaETqCJ+H5Ih9kOPMhm
- TLSH T150058C8363EC2CD4E172913597338A86C7B5BC6106B1C34E43E5126E4F3B6A77E29B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_550cac159b57224ed384931db9fae8fc_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_550cac159b57224ed384931db9fae8fc_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
bazarloader
C2
-
5.2.78.37
-
198.244.194.4
-
38.92.191.89
-
45.14.226.23
-
reddew28c.bazar
-
bluehail.bazar
-
whitestorm9p.bazar
Targets
-
- Target 2026-09-29_550cac159b57224ed384931db9fae8fc_cobalt-strike_icedid_njrat_satacom_vidar
- Size 849KB
- SHA256 19b7ae32876c1903bb2cd81233d024bc9771f0b57d64a0aa194f99ab9ea4b74c
- MD5 550cac159b57224ed384931db9fae8fc
- SHA1 534dec88f264f03f4e4f8e89e712b4134413f324
- SHA512 10e20a42eea8ed0af76fcbf2de528cda308e611a19b886f11c8dc3e5166d1757f1dcc73724d0891420deb81012ab8c25d5a5555902d246380d8632455a6760c6
- SSDEEP 24576:ge7JUtiaEGVkvqCJ+H5Ih9Xtlm0wVOPMMCEJI8r:TRaETqCJ+H5Ih9kOPMhm
- TLSH T150058C8363EC2CD4E172913597338A86C7B5BC6106B1C34E43E5126E4F3B6A77E29B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.