f63aa0fafe119b11feb98bb8001e340bb05e549c04e6fdb7e215d6a997fd84e0

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2026, 15:01

Target
2026-05-11_2d96bc518b21e732a11d2bc04dfed146_cobalt-strike_icedid_satacom_stealc_vidar.exe
Size 227KB
Sample260511-sdxh4acy3z
SHA256 f63aa0fafe119b11feb98bb8001e340bb05e549c04e6fdb7e215d6a997fd84e0
MD5 2d96bc518b21e732a11d2bc04dfed146
SHA1 6138af0c3af95fc73bd84ccf6abe87651287b4fd
SHA512 eb27632bceb0049b34bc1013153db504108281f11f14cbbcff7d7824f0c8f287e27087cc8bb86f81e06b7aa69f9bb4122e427adbba58c64ef562d4ca22849eab
SSDEEP 3072:xSlq+5q+hpF7D2u9RqNrB58B+WAOMfWny+4GbC4OzuP0ERsUObK5b:xSP5q+hDCYqNrB5kjpN9bhOzY
TLSH
T1BB347D1977A50CFAE56B8539CD514906DA72BC4647A0E7CF03E00A9B8F376E09E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5604	2026-05-11_2d96bc518b21e732a11d2bc04dfed146_cobalt-strike_icedid_satacom_stealc_vidar.exe
5604	2026-05-11_2d96bc518b21e732a11d2bc04dfed146_cobalt-strike_icedid_satacom_stealc_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-11_2d96bc518b21e732a11d2bc04dfed146_cobalt-strike_icedid_satacom_stealc_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-11_2d96bc518b21e732a11d2bc04dfed146_cobalt-strike_icedid_satacom_stealc_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5604