2026-10-10_79ea32bfea1cf3058be24fc374a41e5d_cobalt-strike_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

Reason

scan timeout

General

Target
2026-10-10_79ea32bfea1cf3058be24fc374a41e5d_cobalt-strike_icedid_njrat_satacom_vidar
Size 37.5MB
Sample261011-mrhdfagd76
SHA256 84e804832ae1e6f6349065c52c264bf2b9b93c734a3b7a3a5bc7c078b7d65502
MD5 79ea32bfea1cf3058be24fc374a41e5d
SHA1 7590fe1a386409897b9d45d8ce1c89402b340f90
SHA512 8098e649b4b12071eb1e2b3be7d7ef6a5f41b4d474a52eb604681608156a3d85350cf1865e41a606e6f0df780ab47754291581599e041cc3689361f1829cdff5
SSDEEP 196608:yYEvtZcjLTZzsSH41i5FiW301gPj5sy26WwOk:Ivt7s41iWW30UjF
TLSH
T16D87F716767998D9E176C078D2938E227B3174ED073A2BF744C182762F29EF8A93D314
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_79ea32bfea1cf3058be24fc374a41e5d_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-10-10_79ea32bfea1cf3058be24fc374a41e5d_cobalt-strike_icedid_njrat_satacom_vidar

.exe 37.5MB

2026-10-10_79ea32bfea1cf3058be24fc374a41e5d_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH 6e71502fe9bb445af821454aad367342
SHA256 84e804832ae1e6f6349065c52c264bf2b9b93c734a3b7a3a5bc7c078b7d65502
MD5 79ea32bfea1cf3058be24fc374a41e5d
SHA1 7590fe1a386409897b9d45d8ce1c89402b340f90
SHA512 8098e649b4b12071eb1e2b3be7d7ef6a5f41b4d474a52eb604681608156a3d85350cf1865e41a606e6f0df780ab47754291581599e041cc3689361f1829cdff5
SSDEEP 196608:yYEvtZcjLTZzsSH41i5FiW301gPj5sy26WwOk:Ivt7s41iWW30UjF
TLSH
T16D87F716767998D9E176C078D2938E227B3174ED073A2BF744C182762F29EF8A93D314
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24521360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

dlate_x64-f9972ffdbb98c36a.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime CloseHandle GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo CompareStringOrdinal GetLastError FreeEnvironmentStringsW WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW GetCurrentProcess DuplicateHandle GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter CreateThread CreateEventW GetCurrentProcessId ReadFileEx SleepEx WriteFileEx ReadFile GetOverlappedResult FlushFileBuffers RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo SetFileTime GetFileInformationByHandle GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW GetExitCodeProcess CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetCommandLineW lstrlenW RemoveDirectoryW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex DeleteFileW GetEnvironmentVariableW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP GetFileAttributesW FlsFree FlsAlloc GetModuleHandleExW GetModuleHandleW FlsSetValue IsThreadAFiber GetFileType FormatMessageW WaitForMultipleObjects GetModuleHandleA GetTempPathW QueryPerformanceFrequency

bcrypt

BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptSetProperty

ntdll

NtReadFile NtOpenFile NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError

userenv

GetUserProfileDirectoryW

vcruntime140

memcpy __current_exception_context __current_exception __C_specific_handler _CxxThrowException strstr strchr __CxxFrameHandler3 strrchr memset memcmp memmove

api-ms-win-crt-string-l1-1-0

strncpy strcpy strcat strlen strcmp strncmp

api-ms-win-crt-math-l1-1-0

__setusermatherr fmod floor

api-ms-win-crt-heap-l1-1-0

realloc free _set_new_mode calloc malloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __acrt_iob_func __p__commode _set_fmode __stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_thread_local_exe_atexit_callback _register_onexit_function _cexit __p___argv __p___argc _configure_narrow_argv _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _wassert _crt_atexit _seh_filter_exe terminate _c_exit _set_app_type

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

Errors

General

Malware Config

Signatures

File Explorer

2026-10-10_79ea32bfea1cf3058be24fc374a41e5d_cobalt-strike_icedid_njrat_satacom_vidar

api-ms-win-core-synch-l1-2-0

bcryptprimitives

kernel32

bcrypt

ntdll

userenv

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic