f089fb98c35e0cd4292decaa3d0b4bbe69540f64712b68f024ddd82b9119b36b

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/10/2026, 15:04

Target
2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Size 1.7MB
Sample261006-sfytyafc92
SHA256 f089fb98c35e0cd4292decaa3d0b4bbe69540f64712b68f024ddd82b9119b36b
MD5 1b0ee0e467f4187821adaf103fda7ede
SHA1 0bc3c04e83a11fe0551d192c3e9ab82d1844be7a
SHA512 239399efe5d78a9e27f85575bee8cd640a469be9843542cd308dd62bb0d4eed1e180c249f52dec84b8f50a3b418fa199db9be9668bbd5376de4ef4e60bfeea5a
SSDEEP 24576:O5ZWs+OZVEWry8AFPGn63AHvbEUBPm+zb4DhJTMKJezdD2ziTDMekZ6HGOU78Hnd:OZB1G8YAWs7OX/Th85NDMe8Xqnd
TLSH
T13B850209E79808F8E4B7E438C9535916E77A7C4E47615A8F23E4322B2F773909E3A311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 7 IoCs

description	ioc	Process
File created	C:\Program Files\Easeware\DriverEasy\Easeware.Driver.Core.dll	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Easeware\DriverEasy\Easeware.Driver.Core.dll	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Easeware	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Easeware\DriverEasy	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File created	C:\Program Files\Easeware\DriverEasy\__tmp_rar_sfx_access_check_240750421	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File created	C:\Program Files\Easeware\DriverEasy\DriverEasy.exe	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Easeware\DriverEasy\DriverEasy.exe	2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-06_1b0ee0e467f4187821adaf103fda7ede_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe"
1⤵
- Drops file in Program Files directory
PID:1768