a4af0d5642db9c58a8d119eb601a8f6f8de161bfa4472eda06497429058ad24b

Analysis

max time kernel
150s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 22:50

Target
2026-10-05_676fc09f93c9854607f7f91f9defe64b_cobalt-strike_icedid_njrat_satacom_vidar.exe
Size 7.3MB
Sample261006-2sgwmaxt6m
SHA256 a4af0d5642db9c58a8d119eb601a8f6f8de161bfa4472eda06497429058ad24b
MD5 676fc09f93c9854607f7f91f9defe64b
SHA1 3f9f5c70e287e2a483d9b7b8ffc1f83cbc1be3bc
SHA512 bd4acdba3b548e437a058f57de279dcb6c9de6c3109048cac4ae63120ecc9b83253a13ab2290bb06eee07c53f385c26f399c8ed063e385c2d7ba875e1b51a70f
SSDEEP 98304:e2v21LCawfbkWsDwxHbtfhXQzQSlcr0W:X+lCfScZ3XIQ8c3
TLSH
T1B7766B8AB03191D8CD678878C994F106D772B4F66330DACBE590975D3F23AE10EBB661
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2184	2026-10-05_676fc09f93c9854607f7f91f9defe64b_cobalt-strike_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-05_676fc09f93c9854607f7f91f9defe64b_cobalt-strike_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-05_676fc09f93c9854607f7f91f9defe64b_cobalt-strike_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2184