General
- Target 2026-07-02_6cd98bb24d7c05a8f1e25b036fe7f216_cobalt-strike_icedid_satacom_vidar
- Size 1.4MB
- Sample260702-nnrclsft5q
- SHA256 a37096dfc354b6170ea07cf02406cea35dbdd1087c13d4a83d0ef0ce3f928bf6
- MD5 6cd98bb24d7c05a8f1e25b036fe7f216
- SHA1 2f213a4710d83a91ccf774b30c3f80ed2c1190dd
- SHA512 7c1134db805555981e13f3fd8b2e18dc418dd6890ea3ce4be3dfcf4f410d6d6e2769642dccdf9f4a5805e87a43ed70a01451372d9e1eaf45a0c045d6c935cf2c
- SSDEEP 24576:BQ3zS6GXsaJtUsqjnhMgeiCl7G0nehbGZpbD:BQ3zSdXFiDmg27RnWGj
- TLSH T16765025932A80CF9ED77813DC952D909E973BC574330D6AF13A1466A9F339908D3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_6cd98bb24d7c05a8f1e25b036fe7f216_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_6cd98bb24d7c05a8f1e25b036fe7f216_cobalt-strike_icedid_satacom_vidar
- Size 1.4MB
- SHA256 a37096dfc354b6170ea07cf02406cea35dbdd1087c13d4a83d0ef0ce3f928bf6
- MD5 6cd98bb24d7c05a8f1e25b036fe7f216
- SHA1 2f213a4710d83a91ccf774b30c3f80ed2c1190dd
- SHA512 7c1134db805555981e13f3fd8b2e18dc418dd6890ea3ce4be3dfcf4f410d6d6e2769642dccdf9f4a5805e87a43ed70a01451372d9e1eaf45a0c045d6c935cf2c
- SSDEEP 24576:BQ3zS6GXsaJtUsqjnhMgeiCl7G0nehbGZpbD:BQ3zSdXFiDmg27RnWGj
- TLSH T16765025932A80CF9ED77813DC952D909E973BC574330D6AF13A1466A9F339908D3EB22
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory