2026-10-08_6207d87e69d6f8805bfb90d6fa191a0a_cobalt-strike_icedid_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-08_6207d87e69d6f8805bfb90d6fa191a0a_cobalt-strike_icedid_njrat_satacom_stealc_vidar
Size 1.1MB
Sample261009-qmf7csbb54
SHA256 dd63b6a7ea21cbfda74b71563bb71a39ffed38bc3838ffde249df30ba2f30924
MD5 6207d87e69d6f8805bfb90d6fa191a0a
SHA1 cb5f4bbc2f642cbf02ae8fe86161dfbc989f27d5
SHA512 7075dfeec77662b1346d6d19727c0db2359d3c783a9ab9ecc5be99b88819c5254bb305362ec46910c242ba45abf5e00b26677d15a95449a51c9d7232a4392a29
SSDEEP 24576:BMGZLAuHfr+LocGEJBZXV4Ab8uc/Y3tqvn/5ifnjzQ:BnEuHCLRfiC8/YdqPgfn
TLSH
T1A935AF5AB2B400E9D0BA9034CA966607EB72385507305BFB13E016993F77AE46FBF711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-08_6207d87e69d6f8805bfb90d6fa191a0a_cobalt-strike_icedid_njrat_satacom_stealc_vidar

File Explorer

2026-10-08_6207d87e69d6f8805bfb90d6fa191a0a_cobalt-strike_icedid_njrat_satacom_stealc_vidar

.exe 1.1MB

2026-10-08_6207d87e69d6f8805bfb90d6fa191a0a_cobalt-strike_icedid_njrat_satacom_stealc_vidar

IMPHASH a57bfbb0fc273e2b2d2b98ae6649299c
SHA256 dd63b6a7ea21cbfda74b71563bb71a39ffed38bc3838ffde249df30ba2f30924
MD5 6207d87e69d6f8805bfb90d6fa191a0a
SHA1 cb5f4bbc2f642cbf02ae8fe86161dfbc989f27d5
SHA512 7075dfeec77662b1346d6d19727c0db2359d3c783a9ab9ecc5be99b88819c5254bb305362ec46910c242ba45abf5e00b26677d15a95449a51c9d7232a4392a29
SSDEEP 24576:BMGZLAuHfr+LocGEJBZXV4Ab8uc/Y3tqvn/5ifnjzQ:BnEuHCLRfiC8/YdqPgfn
TLSH
T1A935AF5AB2B400E9D0BA9034CA966607EB72385507305BFB13E016993F77AE46FBF711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

593180

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain D3D11CreateDevice

dcomp

DCompositionCreateDevice

d3dcompiler_47

D3DCompile

user32

DispatchMessageA PeekMessageW EnumDisplayMonitors GetMonitorInfoA SetWindowLongPtrA SetWindowLongW SetWindowLongA GetWindowLongW WindowFromPoint SetCursorPos AdjustWindowRectEx TranslateMessage SetPropA ReleaseDC GetDC IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState SetFocus BringWindowToTop SetLayeredWindowAttributes IsChild PeekMessageA GetPropA GetWindowLongPtrW GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetAncestor SetThreadDpiAwarenessContext GetMonitorInfoW MonitorFromWindow EnumDisplaySettingsW LoadCursorA GetWindow GetWindowThreadProcessId FindWindowW SetWindowLongPtrW SendMessageTimeoutA PtInRect EqualRect ScreenToClient ClientToScreen GetCursor GetCursorPos SetCursor GetWindowRect GetClientRect GetWindowTextA SetWindowRgn SetForegroundWindow GetForegroundWindow MsgWaitForMultipleObjectsEx MapVirtualKeyW GetKeyNameTextA GetAsyncKeyState IsZoomed IsIconic IsWindowVisible SetWindowDisplayAffinity SetWindowPos ShowWindow DestroyWindow IsWindow CreateWindowExW RegisterClassExW UnregisterClassW RegisterClassW PostQuitMessage DefWindowProcW PostThreadMessageW PostMessageW SendMessageTimeoutW DispatchMessageW

gdi32

GetDeviceCaps DeleteObject CreateRectRgn CombineRgn

ole32

CoInitializeEx CoUninitialize CoCreateInstance

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

kernel32

GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileSizeEx SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType HeapAlloc HeapFree GetCommandLineW GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW ExitProcess ReadFile FreeEnvironmentStringsW ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError GetLastError RaiseException RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetCurrentProcessId TerminateProcess GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer WakeAllConditionVariable SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW HeapSize SetEndOfFile WriteConsoleW FreeLibraryAndExitThread LoadLibraryA QueryPerformanceFrequency QueryPerformanceCounter GetModuleHandleA CloseHandle GetHandleInformation SetWaitableTimer CreateWaitableTimerExW CreateWaitableTimerW GetCurrentThreadId GetModuleHandleW GetModuleHandleExW WritePrivateProfileStringA GetConsoleWindow OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte VerSetConditionMask FreeLibrary GetProcAddress RtlUnwind GetLocaleInfoA IsDBCSLeadByte WaitForSingleObjectEx Sleep GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime

shell32

ShellExecuteW

Name

.text

Size

798KB

Virtual Size

798KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

249KB

Virtual Size

248KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-08_6207d87e69d6f8805bfb90d6fa191a0a_cobalt-strike_icedid_njrat_satacom_stealc_vidar

d3d11

dcomp

d3dcompiler_47

user32

gdi32

ole32

imm32

kernel32

shell32

generic