General
- Target 2026-10-03_48f71395ca311b7404d444fd35b0b8ff_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- Sample261004-qnby2aba87
- SHA256 9f7f67f65fd23d15717276d3b6c3f124e6400a038ca057ee39b9f10d36793e07
- MD5 48f71395ca311b7404d444fd35b0b8ff
- SHA1 3eee4284f3faa0b5a6a5a19292f2512a98b07797
- SHA512 281be6a772fac2a0dbea22b6bba19fa0e175aeb888e65608678760177b0d58a88dd0277bc8356ea6f106d32fa510000721e8c0e4e2cb53be2c9490c2091ed571
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhN:EaGrCJ+H5Iht1JCD9aN
- TLSH T1B4057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-03_48f71395ca311b7404d444fd35b0b8ff_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-03_48f71395ca311b7404d444fd35b0b8ff_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
bazarloader
C2
-
reddew28c.bazar
Targets
-
- Target 2026-10-03_48f71395ca311b7404d444fd35b0b8ff_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- SHA256 9f7f67f65fd23d15717276d3b6c3f124e6400a038ca057ee39b9f10d36793e07
- MD5 48f71395ca311b7404d444fd35b0b8ff
- SHA1 3eee4284f3faa0b5a6a5a19292f2512a98b07797
- SHA512 281be6a772fac2a0dbea22b6bba19fa0e175aeb888e65608678760177b0d58a88dd0277bc8356ea6f106d32fa510000721e8c0e4e2cb53be2c9490c2091ed571
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhN:EaGrCJ+H5Iht1JCD9aN
- TLSH T1B4057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload