62a65e86531b3fe66ff91d7ada7adfc2d27dcaa8d613bac91b02ce71f44fc809

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/10/2026, 16:51

Target
2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Size 540KB
Sample261022-vcwarav17l
SHA256 62a65e86531b3fe66ff91d7ada7adfc2d27dcaa8d613bac91b02ce71f44fc809
MD5 94f4e2b4d3cfe31ec82f99d68fa5a8d2
SHA1 f11e8027ee6c8bc3473bfc2121edecbd4e649d4d
SHA512 ba4638ea0ac1c9ea1f8a7f6540706a9be3c458ce98c7a0d2fb82ae1f18d72d5376bb21d77e224000dd9e65f0c64505ee50261a5c54f129f34382b0c3775711c7
SSDEEP 12288:hA3ParQ8vp+LfWdnuL+83YTD2JSmld27tk1d:K3PaEJmnuL+83Y+omldIk1d
TLSH
T199C4AE4AB39454F4E877D538CC52466AE2763C168B60DA9F13E4772A3F332E09D3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Drops file in Program Files directory 7 IoCs

description	ioc	Process
File created	C:\Program Files\Solveig Multimedia\SolveigMM Video Splitter x64\version.ini	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Solveig Multimedia\SolveigMM Video Splitter x64\version.ini	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Solveig Multimedia	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Solveig Multimedia\SolveigMM Video Splitter x64	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File created	C:\Program Files\Solveig Multimedia\SolveigMM Video Splitter x64\__tmp_rar_sfx_access_check_240745781	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File created	C:\Program Files\Solveig Multimedia\SolveigMM Video Splitter x64\version.dll	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
File opened for modification	C:\Program Files\Solveig Multimedia\SolveigMM Video Splitter x64\version.dll	2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-10-21_94f4e2b4d3cfe31ec82f99d68fa5a8d2_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe"
1⤵
- Drops file in Program Files directory
PID:1316