Analysis
- max time kernel
148s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 20:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target 2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe
- Size 1.3MB
- Sample261102-zhleysgc73
- SHA256 c6381f01b611f740aac8c6b3374faf4f10329123b28dc92f3e53ea34246f3230
- MD5 de8d9af5aefdf20656e1a6f24a000470
- SHA1 51201ca6f1dd7f6c416f5400faf923578eda7747
- SHA512 aa60e1acdfceb3d4c38ad6ed8f776bde7c3a7b8894dc3eec4567ad55bc5ce48533c2794e09bec5869f42acb0baf50c4bf80ebf1603a918ec5d6531803692c20e
- SSDEEP 24576:zXjGqGMkEmTK3+5k/40/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:zT1GamTV5CLNiXicJFFRGNzj3
- TLSH T11C55AE76AEA701E8E367D138B9525401EE7A3C05C7605ADF12D0367A3E77AD58F3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2984 2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe 2984 2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-11-02_de8d9af5aefdf20656e1a6f24a000470_cobalt-strike_coinminer_icedid_njrat_satacom_vidar.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2984