2026-10-01_56db3a1fef61604ca16018ed9c090bfb_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-01_56db3a1fef61604ca16018ed9c090bfb_cobalt-strike_icedid_njrat_satacom_vidar
Size 1.3MB
Sample261002-rpmmlaszgx
SHA256 170b6895b19237faa3bf176d976439b580325016e472a2c352ae308c1ba2476d
MD5 56db3a1fef61604ca16018ed9c090bfb
SHA1 8bb4c58ba3130985580531204937070e010fb005
SHA512 884bb7fdd5b8e42875ee4d1f93e47a5b55f1afb55da3f5e2748f11e5222a89b60c692d568203a49f7b91987e97646a8e1197a0419b4d393367f9c75b94b88d9f
SSDEEP 24576:7b5kSYaLOVJC5yIXWReBmauLxUmeZQ+Zm/3i4ojE9b1ZBgBd:7b5k2LOk5V5mxLxU9XmPijcxId
TLSH
T1D055125AB3D90CF5D573C13889825601FA7278910735D6EF13A08A1BEF636D0AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_56db3a1fef61604ca16018ed9c090bfb_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-10-01_56db3a1fef61604ca16018ed9c090bfb_cobalt-strike_icedid_njrat_satacom_vidar

.exe 1.3MB

2026-10-01_56db3a1fef61604ca16018ed9c090bfb_cobalt-strike_icedid_njrat_satacom_vidar

SHA256 170b6895b19237faa3bf176d976439b580325016e472a2c352ae308c1ba2476d
MD5 56db3a1fef61604ca16018ed9c090bfb
SHA1 8bb4c58ba3130985580531204937070e010fb005
SHA512 884bb7fdd5b8e42875ee4d1f93e47a5b55f1afb55da3f5e2748f11e5222a89b60c692d568203a49f7b91987e97646a8e1197a0419b4d393367f9c75b94b88d9f
SSDEEP 24576:7b5kSYaLOVJC5yIXWReBmauLxUmeZQ+Zm/3i4ojE9b1ZBgBd:7b5k2LOk5V5mxLxU9XmPijcxId
TLSH
T1D055125AB3D90CF5D573C13889825601FA7278910735D6EF13A08A1BEF636D0AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

44796

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.rdata

Size

163KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_56db3a1fef61604ca16018ed9c090bfb_cobalt-strike_icedid_njrat_satacom_vidar

generic