General
- Target 2026-07-01_db36c88b0982b1abf8b9c4303b85d1a5_cobalt-strike_icedid_satacom_stealc_vidar
- Size 1024KB
- Sample260702-br5m7ahs6m
- SHA256 2d211f53badf9dc37739b11da719fb96b5f007b22bd3bc9be557347ea370904b
- MD5 db36c88b0982b1abf8b9c4303b85d1a5
- SHA1 d28a1c0e1583aa2f45d66fe2822645a135672b99
- SHA512 bb136eb8ef8d7f49a89dc35b270d33bbe76eedee39086662acf740ac368c6795a08d6e973fb48fbc355d6b105fa408db0b078fcfdc09fb1d4178c497bac14200
- SSDEEP 12288:J5jtWanm/6xFv6XAmZXuY6zLenAstkJ1kwWOmv2:/jrm/ev6XAhY2enbtkJxdmv2
- TLSH T14E25E512A6948676E06256308961816CAB327C59CB338F8F3294BDDEFFF76904DB4731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_db36c88b0982b1abf8b9c4303b85d1a5_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_db36c88b0982b1abf8b9c4303b85d1a5_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_db36c88b0982b1abf8b9c4303b85d1a5_cobalt-strike_icedid_satacom_stealc_vidar
- Size 1024KB
- SHA256 2d211f53badf9dc37739b11da719fb96b5f007b22bd3bc9be557347ea370904b
- MD5 db36c88b0982b1abf8b9c4303b85d1a5
- SHA1 d28a1c0e1583aa2f45d66fe2822645a135672b99
- SHA512 bb136eb8ef8d7f49a89dc35b270d33bbe76eedee39086662acf740ac368c6795a08d6e973fb48fbc355d6b105fa408db0b078fcfdc09fb1d4178c497bac14200
- SSDEEP 12288:J5jtWanm/6xFv6XAmZXuY6zLenAstkJ1kwWOmv2:/jrm/ev6XAhY2enbtkJxdmv2
- TLSH T14E25E512A6948676E06256308961816CAB327C59CB338F8F3294BDDEFFF76904DB4731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.