General
- Target 2026-06-06_511a364fc6cc3e364bd9081e4170339c_cobalt-strike_icedid_satacom_stealc_vidar
- Size 4.4MB
- Sample260606-cmd54sg16z
- SHA256 c2d18d173512699b325ab09b4a8b1eebb48f667966c5ffe06b0547fa2de8c82c
- MD5 511a364fc6cc3e364bd9081e4170339c
- SHA1 432d5b7a13ee4707e200cd16efda8610ac5307ff
- SHA512 8d9c467ded7a9f854f440f284ce30641e9aba027ad817f49752c713531fc4ab6c4a1bccca9184953e3bf9dcea153e35c7d8e960e7dc0a673e3fcd84f6f76c7b4
- SSDEEP 98304:7gh4j4ln7q1zg9LC602IJepeevKwcDe7Ubef9VyyvYcp2tvc:7jMlnOa9LzFIJe3dse7UbefTyyAcpAv
- TLSH T16426332B57A016EAE1FBD036C9901E05B379B5510B5A6A7F0610937E5F236F0AE31BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-06_511a364fc6cc3e364bd9081e4170339c_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_511a364fc6cc3e364bd9081e4170339c_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-06_511a364fc6cc3e364bd9081e4170339c_cobalt-strike_icedid_satacom_stealc_vidar
- Size 4.4MB
- SHA256 c2d18d173512699b325ab09b4a8b1eebb48f667966c5ffe06b0547fa2de8c82c
- MD5 511a364fc6cc3e364bd9081e4170339c
- SHA1 432d5b7a13ee4707e200cd16efda8610ac5307ff
- SHA512 8d9c467ded7a9f854f440f284ce30641e9aba027ad817f49752c713531fc4ab6c4a1bccca9184953e3bf9dcea153e35c7d8e960e7dc0a673e3fcd84f6f76c7b4
- SSDEEP 98304:7gh4j4ln7q1zg9LC602IJepeevKwcDe7Ubef9VyyvYcp2tvc:7jMlnOa9LzFIJe3dse7UbefTyyAcpAv
- TLSH T16426332B57A016EAE1FBD036C9901E05B379B5510B5A6A7F0610937E5F236F0AE31BE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.