General
- Target 2026-06-28_7960cfbdd12d1722fd2f2ed6dc2a0c28_cobalt-strike_icedid_satacom_vidar
- Size 958KB
- Sample260628-1b91eafs7q
- SHA256 385748ddea99a32a2d7e85f3b803947199ec3ee5f18dd3cad517d7df1812011d
- MD5 7960cfbdd12d1722fd2f2ed6dc2a0c28
- SHA1 bc26929d3158f26f12b7822f10f5235ad188e02f
- SHA512 e5d821feb689ea7621e2b34387b67f8c0e0cde703ff7d9167ce24e0ec0f8c22963c162c06eb6f9302fb6c15b60cc8181297cd23f1f83f6bdae9aabec8d73c81b
- SSDEEP 12288:unGDWa2hJlBWFl1vZn/HWcKif9XRK/NWiF0uJzsxJwlVW:NDWGFvR/AifP03FfzsUPW
- TLSH T1F4253941A7F42298F1B3AB71EE3140659FB3BC456E38C55E12C4C41D1E72EA0E97AB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_7960cfbdd12d1722fd2f2ed6dc2a0c28_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_7960cfbdd12d1722fd2f2ed6dc2a0c28_cobalt-strike_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_7960cfbdd12d1722fd2f2ed6dc2a0c28_cobalt-strike_icedid_satacom_vidar
- Size 958KB
- SHA256 385748ddea99a32a2d7e85f3b803947199ec3ee5f18dd3cad517d7df1812011d
- MD5 7960cfbdd12d1722fd2f2ed6dc2a0c28
- SHA1 bc26929d3158f26f12b7822f10f5235ad188e02f
- SHA512 e5d821feb689ea7621e2b34387b67f8c0e0cde703ff7d9167ce24e0ec0f8c22963c162c06eb6f9302fb6c15b60cc8181297cd23f1f83f6bdae9aabec8d73c81b
- SSDEEP 12288:unGDWa2hJlBWFl1vZn/HWcKif9XRK/NWiF0uJzsxJwlVW:NDWGFvR/AifP03FfzsUPW
- TLSH T1F4253941A7F42298F1B3AB71EE3140659FB3BC456E38C55E12C4C41D1E72EA0E97AB63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Windows security bypass
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Windows security modification
-
Drops file in System32 directory