General
- Target 2026-10-05_a9d5fdfb3fe05994b4ded8d5720c7433_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- Sample261006-v4j2ssbv6v
- SHA256 80a2813e3f34de4619c0e8823e00824c0be65a008119d88f218e769cc2f36ddf
- MD5 a9d5fdfb3fe05994b4ded8d5720c7433
- SHA1 cd6474e7abc8f71fe7022fbbb57550fb0f9c5ef2
- SHA512 55a730b6b4be5438f6476418d145c9274a2ab862e2c9107b553e60eb35978cf9440bdbfabe18bd335334a5e297ac4918fb7a70a7cefc8cc82335ef16c3e07376
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhO:EaGrCJ+H5Iht1JCD9aO
- TLSH T181057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-05_a9d5fdfb3fe05994b4ded8d5720c7433_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-05_a9d5fdfb3fe05994b4ded8d5720c7433_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
bazarloader
C2
-
reddew28c.bazar
Targets
-
- Target 2026-10-05_a9d5fdfb3fe05994b4ded8d5720c7433_cobalt-strike_icedid_njrat_satacom_vidar
- Size 846KB
- SHA256 80a2813e3f34de4619c0e8823e00824c0be65a008119d88f218e769cc2f36ddf
- MD5 a9d5fdfb3fe05994b4ded8d5720c7433
- SHA1 cd6474e7abc8f71fe7022fbbb57550fb0f9c5ef2
- SHA512 55a730b6b4be5438f6476418d145c9274a2ab862e2c9107b553e60eb35978cf9440bdbfabe18bd335334a5e297ac4918fb7a70a7cefc8cc82335ef16c3e07376
- SSDEEP 24576:Mu2/xctHmrCJ+H5IhtfqVUEoJCE0/FWLhhO:EaGrCJ+H5Iht1JCD9aO
- TLSH T181057C83A3EC2CD4E17291368B338786DBB5BC611675C34E42D4135A1F3F6A27E2AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.
-
Bazar/Team9 Loader payload