General
- Target 2026-06-30_01041cda28ff891b4b64e0c1fa3f5464_cobalt-strike_icedid_satacom_vidar
- Size 1.9MB
- Sample260701-blympady2w
- SHA256 9496f7e8a0ba394f0fff608030de657d21e794a94dae4faa27dfffe94b63ad69
- MD5 01041cda28ff891b4b64e0c1fa3f5464
- SHA1 592d1ac4ec47a552b370c4e884b50186fed9155d
- SHA512 2b62be682cdb4e821a621698469cfd5649999c5e13419730ddc39d454361ed847cd0e6ed796a7f0fd45be5e612e914d803d0f6f830d5f2e915d11ad436558274
- SSDEEP 24576:IxDawlOjwGXgXe4i7ojhsP5Lgrk1TWb4AN5:gOAOjAe30jaNf1TWbdz
- TLSH T109958D79E6B844C5E2BAB53881638555E222FC09435196CF3A687F063F77BD4FA7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_01041cda28ff891b4b64e0c1fa3f5464_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_01041cda28ff891b4b64e0c1fa3f5464_cobalt-strike_icedid_satacom_vidar
- Size 1.9MB
- SHA256 9496f7e8a0ba394f0fff608030de657d21e794a94dae4faa27dfffe94b63ad69
- MD5 01041cda28ff891b4b64e0c1fa3f5464
- SHA1 592d1ac4ec47a552b370c4e884b50186fed9155d
- SHA512 2b62be682cdb4e821a621698469cfd5649999c5e13419730ddc39d454361ed847cd0e6ed796a7f0fd45be5e612e914d803d0f6f830d5f2e915d11ad436558274
- SSDEEP 24576:IxDawlOjwGXgXe4i7ojhsP5Lgrk1TWb4AN5:gOAOjAe30jaNf1TWbdz
- TLSH T109958D79E6B844C5E2BAB53881638555E222FC09435196CF3A687F063F77BD4FA7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1