General
- Target 2026-09-30_d0daf7d6e231d338b81e60deae929e31_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- Sample260930-jh57csv13l
- SHA256 68df38d2a3f057b35d0e00a774a2d2a91a72d98042c180364f4469b594d171af
- MD5 d0daf7d6e231d338b81e60deae929e31
- SHA1 37618efdd211f17a083ee0744f20a46ad7f70562
- SHA512 b65eb58f84b9252ed83c5493f8f7e9a69d95788fe482473f2ba7b3f9d794d9b52bf4fb422972618acabeddd86c9eba49ea78b197c8cd5c6cd2a4763d694d6004
- SSDEEP 49152:AHs5/EaWEzVHEh2b62pTETMc8gFIDRRAubt5M:AHm82ROUf
- TLSH T1BD75CF07B69600FCC06EC1B8CB169132EA71B8850F71BADF1390A7692E76AE45F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_d0daf7d6e231d338b81e60deae929e31_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_d0daf7d6e231d338b81e60deae929e31_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_d0daf7d6e231d338b81e60deae929e31_cobalt-strike_icedid_njrat_ryuk_satacom_vidar
- Size 1.6MB
- SHA256 68df38d2a3f057b35d0e00a774a2d2a91a72d98042c180364f4469b594d171af
- MD5 d0daf7d6e231d338b81e60deae929e31
- SHA1 37618efdd211f17a083ee0744f20a46ad7f70562
- SHA512 b65eb58f84b9252ed83c5493f8f7e9a69d95788fe482473f2ba7b3f9d794d9b52bf4fb422972618acabeddd86c9eba49ea78b197c8cd5c6cd2a4763d694d6004
- SSDEEP 49152:AHs5/EaWEzVHEh2b62pTETMc8gFIDRRAubt5M:AHm82ROUf
- TLSH T1BD75CF07B69600FCC06EC1B8CB169132EA71B8850F71BADF1390A7692E76AE45F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Drops file in System32 directory