2026-10-11_3d7f9d79b457388edeba6dca35945536_cobalt-strike_coinminer_icedid_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-11_3d7f9d79b457388edeba6dca35945536_cobalt-strike_coinminer_icedid_njrat_satacom_vidar
Size 1.7MB
Sample261012-3tkvcafe58
SHA256 bbb73f4786e26def8500f5ab39c65570bc01daee8dcfd45e70beb12cce1fbee7
MD5 3d7f9d79b457388edeba6dca35945536
SHA1 4b4a7d2028b3cbddcfae8d74af7e94ad9f954faf
SHA512 1b818eb22f69da50a254481fe65685fade838afff08f59be8b7c0a1956f8d7fa2acc67e54b846e893a7fa99a99349655b838b954258d845d6500c54afb608559
SSDEEP 24576:+T/AwEwqbSYCh4DgFXnuQX5Q8aV0GTAIUm607w5RbASbn37+X5csStXd0cwQdNxE:Im8FXnuQX5DtI+085R97+tS/ZNtY
TLSH
T1AF859D9AB26844E9D066F337C5135D1BD3B0F885027C976B17D41AAE9FE33A11E2E702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-11_3d7f9d79b457388edeba6dca35945536_cobalt-strike_coinminer_icedid_njrat_satacom_vidar

File Explorer

2026-10-11_3d7f9d79b457388edeba6dca35945536_cobalt-strike_coinminer_icedid_njrat_satacom_vidar

.exe 1.7MB

2026-10-11_3d7f9d79b457388edeba6dca35945536_cobalt-strike_coinminer_icedid_njrat_satacom_vidar

IMPHASH d93970a16a97fb4d515dd8a7825c6ed2
SHA256 bbb73f4786e26def8500f5ab39c65570bc01daee8dcfd45e70beb12cce1fbee7
MD5 3d7f9d79b457388edeba6dca35945536
SHA1 4b4a7d2028b3cbddcfae8d74af7e94ad9f954faf
SHA512 1b818eb22f69da50a254481fe65685fade838afff08f59be8b7c0a1956f8d7fa2acc67e54b846e893a7fa99a99349655b838b954258d845d6500c54afb608559
SSDEEP 24576:+T/AwEwqbSYCh4DgFXnuQX5Q8aV0GTAIUm607w5RbASbn37+X5csStXd0cwQdNxE:Im8FXnuQX5DtI+085R97+tS/ZNtY
TLSH
T1AF859D9AB26844E9D066F337C5135D1BD3B0F885027C976B17D41AAE9FE33A11E2E702
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1032800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\quickbms\soft\UEViewer-master_1544\UEViewer-master\umodel.pdb

user32

SendMessageA CloseClipboard EmptyClipboard SetClipboardData LoadIconA SetMenuItemInfoA InsertMenuItemA TrackPopupMenuEx DeleteMenu AppendMenuA GetMenuItemCount EnableMenuItem CheckMenuItem DestroyMenu CreatePopupMenu CreateMenu DrawMenuBar SetMenu LoadImageA GetParent SetWindowLongPtrA GetWindowLongPtrA SetWindowLongA GetWindowLongA GetSysColor ScreenToClient GetCursorPos AdjustWindowRect GetWindowRect GetClientRect GetWindowTextLengthA GetWindowTextA SetWindowTextA LockWindowUpdate InvalidateRect ReleaseDC GetDC SetForegroundWindow GetSystemMetrics IsWindowEnabled EnableWindow GetKeyState IsDlgButtonChecked CheckDlgButton EndDialog DialogBoxIndirectParamA CreateDialogIndirectParamA SetWindowPos MoveWindow ShowWindow CreateWindowExA PeekMessageA DispatchMessageA TranslateMessage GetMessageA OpenClipboard

gdi32

SetTextColor SelectObject GetTextExtentPoint32A CreateSolidBrush

comctl32

ord410 InitCommonControlsEx ImageList_Create ord413 ord17 ImageList_ReplaceIcon

shell32

SHGetPathFromIDListA SHBrowseForFolderA ShellExecuteA

ole32

CoInitialize CoTaskMemFree CoCreateInstance

shlwapi

SHAutoComplete

kernel32

HeapReAlloc WideCharToMultiByte SetStdHandle GetFileSizeEx GetConsoleCP SetFilePointerEx ReadConsoleW GetConsoleMode DeleteFileW LCMapStringW CompareStringW MultiByteToWideChar GetFullPathNameW GetCommandLineW FlushFileBuffers WriteFile GetStdHandle GetModuleFileNameW SetConsoleCtrlHandler GetOEMCP ExitThread CreateThread PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW CreateFileW HeapSize FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindNextFileW FindFirstFileExW FindClose ReadFile GetModuleHandleExW LoadLibraryExW CreateDirectoryW GetCurrentDirectoryW IsValidCodePage GetCommandLineA GetACP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetTimeZoneInformation TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer SetLastError RtlUnwind RtlPcToFileHeader SetEndOfFile FreeLibraryAndExitThread GetModuleHandleA LoadLibraryA VirtualQuery GetModuleFileNameA GlobalAlloc GlobalUnlock GlobalLock CloseHandle InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ReleaseSemaphore WaitForSingleObject Sleep GetCurrentThreadId ResumeThread GetNativeSystemInfo CreateSemaphoreA WriteConsoleW FreeLibrary GetProcAddress VerSetConditionMask VerifyVersionInfoW ExitProcess RaiseException GetLastError GetSystemInfo VirtualProtect GetModuleHandleW LoadLibraryExA OutputDebugStringA HeapAlloc HeapFree GetProcessHeap InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetCurrentProcess TerminateProcess RtlUnwindEx

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

420KB

Virtual Size

420KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

33KB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

69KB

Virtual Size

68KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-11_3d7f9d79b457388edeba6dca35945536_cobalt-strike_coinminer_icedid_njrat_satacom_vidar

user32

gdi32

comctl32

shell32

ole32

shlwapi

kernel32

generic