General
- Target 2026-10-01_65a818147e22c9132a9cf45fe1aff642_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 526KB
- Sample261002-qe4mpayzcs
- SHA256 6cfe397b3004d59fedae6e9c50c5776239cdc42cb71413b943b692999198daaa
- MD5 65a818147e22c9132a9cf45fe1aff642
- SHA1 3887f42cd5e64b6e1bee47fcd70635758e0bb0ab
- SHA512 672ca0f86a387f41254ad2d22fc38381dc89a06fda4961c4e84b14fe4cbd65fe13c537272f46a89fbd581c640b9a4903fcf59e284212879c3d8edf4e7a8e779e
- SSDEEP 6144:qj3iVUQ508kLJdnPSr9If+asePlzjF4xCBDvAsREykTzO9Tq8oh210vvt//:qj3K7Cd0IvssFdDoeFXo9vx
- TLSH T120B46B4AA2AD43FDE07BA07CD9475A42F639744603B18AEF039105B31E671E1AF7E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_65a818147e22c9132a9cf45fe1aff642_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_65a818147e22c9132a9cf45fe1aff642_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_65a818147e22c9132a9cf45fe1aff642_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 526KB
- SHA256 6cfe397b3004d59fedae6e9c50c5776239cdc42cb71413b943b692999198daaa
- MD5 65a818147e22c9132a9cf45fe1aff642
- SHA1 3887f42cd5e64b6e1bee47fcd70635758e0bb0ab
- SHA512 672ca0f86a387f41254ad2d22fc38381dc89a06fda4961c4e84b14fe4cbd65fe13c537272f46a89fbd581c640b9a4903fcf59e284212879c3d8edf4e7a8e779e
- SSDEEP 6144:qj3iVUQ508kLJdnPSr9If+asePlzjF4xCBDvAsREykTzO9Tq8oh210vvt//:qj3K7Cd0IvssFdDoeFXo9vx
- TLSH T120B46B4AA2AD43FDE07BA07CD9475A42F639744603B18AEF039105B31E671E1AF7E760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE