General
- Target 2026-07-06_4569679c20fde5c262e056fd220d9c23_cobalt-strike_icedid_satacom_vidar
- Size 652KB
- Sample260706-wx176sft4j
- SHA256 11a0da07c2e693ee486a165c99fa7025c20188ae5e5a618b7bfe273557978266
- MD5 4569679c20fde5c262e056fd220d9c23
- SHA1 21c9e68720ce5fd93a2384245a018ce881846752
- SHA512 574a4dc58b00b659e972a09f08d0da2d07b297d68686fd12c7c730ebe2799ec4824f1bc3d16ce8272d787b798c5de378f2d32d3f4510d2cd48b418131b7da440
- SSDEEP 12288:HtVwZpFhOMMGaf8Zt/5I28ueDh99d3qxyf:H/tQZ+vh99d3qxy
- TLSH T168E44B562B65DC9BC2621B7D58F0F33893784FE07E69832B8EE14DC37E61A4A2D944C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_4569679c20fde5c262e056fd220d9c23_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_4569679c20fde5c262e056fd220d9c23_cobalt-strike_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_4569679c20fde5c262e056fd220d9c23_cobalt-strike_icedid_satacom_vidar
- Size 652KB
- SHA256 11a0da07c2e693ee486a165c99fa7025c20188ae5e5a618b7bfe273557978266
- MD5 4569679c20fde5c262e056fd220d9c23
- SHA1 21c9e68720ce5fd93a2384245a018ce881846752
- SHA512 574a4dc58b00b659e972a09f08d0da2d07b297d68686fd12c7c730ebe2799ec4824f1bc3d16ce8272d787b798c5de378f2d32d3f4510d2cd48b418131b7da440
- SSDEEP 12288:HtVwZpFhOMMGaf8Zt/5I28ueDh99d3qxyf:H/tQZ+vh99d3qxy
- TLSH T168E44B562B65DC9BC2621B7D58F0F33893784FE07E69832B8EE14DC37E61A4A2D944C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.