General
- Target 2026-09-30_df3a0872ece1132b7034c55eabf68897_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- Sample261001-e11mdatclc
- SHA256 ee1fef57084ba414bcf7e38981201f9bdd21b1df146433a0b81872da37781741
- MD5 df3a0872ece1132b7034c55eabf68897
- SHA1 44a6cfb3ad90be972a77515f1133cc4cb130a976
- SHA512 08791e6eb548ab974dc46342089783cb0c1e4a67b58f31562a87250bd08e8fffce9ce750a069aeea17ba4a021f2e9aae198c24fd482f271026e66a7ceacf7742
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhS:EaGrCJ+H5Iht1JCD9aS
- TLSH T191057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_df3a0872ece1132b7034c55eabf68897_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_df3a0872ece1132b7034c55eabf68897_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
bazarloader
C2
-
reddew28c.bazar
Targets
-
- Target 2026-09-30_df3a0872ece1132b7034c55eabf68897_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- SHA256 ee1fef57084ba414bcf7e38981201f9bdd21b1df146433a0b81872da37781741
- MD5 df3a0872ece1132b7034c55eabf68897
- SHA1 44a6cfb3ad90be972a77515f1133cc4cb130a976
- SHA512 08791e6eb548ab974dc46342089783cb0c1e4a67b58f31562a87250bd08e8fffce9ce750a069aeea17ba4a021f2e9aae198c24fd482f271026e66a7ceacf7742
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhS:EaGrCJ+H5Iht1JCD9aS
- TLSH T191057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload