2026-06-30_6e60519d19908204b38f30be60a29bd9_cobalt-strike_icedid_satacom_vidar

General

Target
2026-06-30_6e60519d19908204b38f30be60a29bd9_cobalt-strike_icedid_satacom_vidar
Size 1.7MB
Sample260701-e3sdsaes9p
SHA256 a97d2db77b350d810fbd0829dd9f91473e50becd7edeab382a5b8b01082289b0
MD5 6e60519d19908204b38f30be60a29bd9
SHA1 84615ea008af676fd1bdd3f5a5c0e3a61939b804
SHA512 fed75d382fb173238120fb163df50b179024f587131779698a63052d713cf513bfb1e08c4b1b3f346d29ef8f8de4b45ca8e181aa67435111d2e718efc1d9c507
SSDEEP 24576:jVf+k1ixOFthHE8MEX1XsdIAhb0VECwN:5flixO3hHE8MEXWI4bMQN
TLSH
T1ED85F10A72D0A2D4E9E5713CCF91C6785362BCA409124B5F42E53E5B3DFF2D74E26AA0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_6e60519d19908204b38f30be60a29bd9_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-06-30_6e60519d19908204b38f30be60a29bd9_cobalt-strike_icedid_satacom_vidar

.exe 1.7MB

2026-06-30_6e60519d19908204b38f30be60a29bd9_cobalt-strike_icedid_satacom_vidar

IMPHASH b856e2187538205bb2e64f39cc1675f2
SHA256 a97d2db77b350d810fbd0829dd9f91473e50becd7edeab382a5b8b01082289b0
MD5 6e60519d19908204b38f30be60a29bd9
SHA1 84615ea008af676fd1bdd3f5a5c0e3a61939b804
SHA512 fed75d382fb173238120fb163df50b179024f587131779698a63052d713cf513bfb1e08c4b1b3f346d29ef8f8de4b45ca8e181aa67435111d2e718efc1d9c507
SSDEEP 24576:jVf+k1ixOFthHE8MEX1XsdIAhb0VECwN:5flixO3hHE8MEXWI4bMQN
TLSH
T1ED85F10A72D0A2D4E9E5713CCF91C6785362BCA409124B5F42E53E5B3DFF2D74E26AA0
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\develope\ScreencastV7\x64\Release\HotKey.pdb

user32

UnhookWindowsHookEx DispatchMessageW GetMessageW SetWindowsHookExW CallNextHookEx wsprintfW SendMessageW MessageBoxW

kernel32

ExitProcess WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetCommandLineA GetCommandLineW GetStdHandle WriteFile GetModuleFileNameW GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP

Name

.text

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_6e60519d19908204b38f30be60a29bd9_cobalt-strike_icedid_satacom_vidar

user32

kernel32

generic