2026-10-26_c030319cecea108047c151737ca22ed9_cobalt-strike_icedid_njrat_satacom_vidar

General

Target
2026-10-26_c030319cecea108047c151737ca22ed9_cobalt-strike_icedid_njrat_satacom_vidar
Size 277KB
Sample261027-jl12tabv3x
SHA256 1ce26c956257bdfb55d2f64dcccfc7a35f8e9ec49f71d19227f052301b3ae0e2
MD5 c030319cecea108047c151737ca22ed9
SHA1 07bce6106c40626d84d85d5c1d3aaa17e1b93567
SHA512 74c95bc5521444a5be7b8c4fb9d571fcafac469f886298aa9093cbc747fc85892626e0e6b57ef32dec8e1ec6f8f75b575f2293e2ff867373eca27898d7f609c3
SSDEEP 3072:b8+aWfZE7XYunIsdC4xi8EdeDHWQIJbIMdENdtn0Am1tTOU7VDaUeapFoY46/GaP:4yns04vEcDHWQIJbXdENL0VnohgdYG
TLSH
T139547C5AB3A508F9EC73813DC9528906E672BC160731C6EF03A0476A6F276D09D7FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_c030319cecea108047c151737ca22ed9_cobalt-strike_icedid_njrat_satacom_vidar

File Explorer

2026-10-26_c030319cecea108047c151737ca22ed9_cobalt-strike_icedid_njrat_satacom_vidar

.exe 277KB

2026-10-26_c030319cecea108047c151737ca22ed9_cobalt-strike_icedid_njrat_satacom_vidar

IMPHASH c21330a28d7a6330d0376c35c0d3db60
SHA256 1ce26c956257bdfb55d2f64dcccfc7a35f8e9ec49f71d19227f052301b3ae0e2
MD5 c030319cecea108047c151737ca22ed9
SHA1 07bce6106c40626d84d85d5c1d3aaa17e1b93567
SHA512 74c95bc5521444a5be7b8c4fb9d571fcafac469f886298aa9093cbc747fc85892626e0e6b57ef32dec8e1ec6f8f75b575f2293e2ff867373eca27898d7f609c3
SSDEEP 3072:b8+aWfZE7XYunIsdC4xi8EdeDHWQIJbIMdENdtn0Am1tTOU7VDaUeapFoY46/GaP:4yns04vEcDHWQIJbXdENL0VnohgdYG
TLSH
T139547C5AB3A508F9EC73813DC9528906E672BC160731C6EF03A0476A6F276D09D7FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

48892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

CreateWindowExW GetMonitorInfoW MonitorFromWindow SystemParametersInfoW LoadImageW GetWindow SetWindowLongPtrW GetWindowLongPtrW FillRect GetSysColorBrush GetSysColor MapWindowPoints GetWindowRect GetClientRect GetWindowTextLengthW SetWindowTextW ShowScrollBar InvalidateRect ReleaseDC GetDC IsWindowEnabled EnableWindow GetFocus SetFocus GetDlgCtrlID SendDlgItemMessageW GetDlgItem EndDialog CreateDialogIndirectParamW IsIconic IsWindowVisible SetWindowPos MoveWindow ShowWindow DestroyWindow IsWindow SendMessageW

gdi32

SetTextColor SetBkColor SelectObject GetDeviceCaps DeleteObject CreateFontIndirectW GetTextMetricsW

kernel32

GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile FreeEnvironmentStringsW GetConsoleOutputCP FlushFileBuffers CloseHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetFileType HeapFree HeapAlloc SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize CreateFileW WriteConsoleW GetConsoleMode GetCurrentProcess GetModuleHandleW GetProcAddress MulDiv WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter RtlUnwind TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetCommandLineW RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_c030319cecea108047c151737ca22ed9_cobalt-strike_icedid_njrat_satacom_vidar

user32

gdi32

kernel32

generic