General
- Target 2026-11-01_c0b97d0ea6299e1ac13213d20caa5c2a_cobalt-strike_icedid_njrat_vidar
- Size 319KB
- Sample261102-lrnd1sgx3v
- SHA256 b3d4501e00e519d9e96de992be872647f7e6b3e7fe5f9b0437adc4e38e2269e2
- MD5 c0b97d0ea6299e1ac13213d20caa5c2a
- SHA1 532a93f0f1834ecd040b827f71a61e4fe1966fd6
- SHA512 41b934500835871eb9f016b12ec845198153dac16dcc8dc220c9fff3d570d745d4f24b71ffddfc42d6a99d62c215e1b31c535f22e24faaeef80df5103d326a15
- SSDEEP 6144:nb32gffRb5BbDOroAw16dgjl6ph/qIaNBp7k//F4:nig3RrvooAw1pl6TBaj+nF
- TLSH T1FD64AE99B7A00CF4EC7B813DC8526507D6B1BC120760D69F1BA812675F333619D3EBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c0b97d0ea6299e1ac13213d20caa5c2a_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c0b97d0ea6299e1ac13213d20caa5c2a_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c0b97d0ea6299e1ac13213d20caa5c2a_cobalt-strike_icedid_njrat_vidar
- Size 319KB
- SHA256 b3d4501e00e519d9e96de992be872647f7e6b3e7fe5f9b0437adc4e38e2269e2
- MD5 c0b97d0ea6299e1ac13213d20caa5c2a
- SHA1 532a93f0f1834ecd040b827f71a61e4fe1966fd6
- SHA512 41b934500835871eb9f016b12ec845198153dac16dcc8dc220c9fff3d570d745d4f24b71ffddfc42d6a99d62c215e1b31c535f22e24faaeef80df5103d326a15
- SSDEEP 6144:nb32gffRb5BbDOroAw16dgjl6ph/qIaNBp7k//F4:nig3RrvooAw1pl6TBaj+nF
- TLSH T1FD64AE99B7A00CF4EC7B813DC8526507D6B1BC120760D69F1BA812675F333619D3EBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext