General
- Target 2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar
- Size 2.0MB
- Sample260708-e2dh8sbv7r
- SHA256 96aedea48a59683d772a62c9eaaaa7a8d42ace01360efef2d81f602dc5a35a06
- MD5 88fa4a305dedf4eaa48f4800316d2dd7
- SHA1 b3220746fd26d2413cc6f1f9f9cc83e70a227fe2
- SHA512 6c14f894b4e80f7f61bab8b52b3d3e68b26b41cc1f3956712cb1042fcfce2a2fd09d4e181efbe10f76c128b031229c765b766fb46c48d28d9517d30f48a1c57b
- SSDEEP 24576:g/YBrk0rLj2de4seIzIk3vj6iIoEBIO2AMtmKoqdVGxANdmL0LU8PxLJNeL5Ta:64w0L2FIzI46ixEs1mnBmS0LtXNek
- TLSH T15DA5F1B3B3694E86D2334735889183F48BA56FD48768838946F8CD37F8428772D699CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar
- Size 2.0MB
- SHA256 96aedea48a59683d772a62c9eaaaa7a8d42ace01360efef2d81f602dc5a35a06
- MD5 88fa4a305dedf4eaa48f4800316d2dd7
- SHA1 b3220746fd26d2413cc6f1f9f9cc83e70a227fe2
- SHA512 6c14f894b4e80f7f61bab8b52b3d3e68b26b41cc1f3956712cb1042fcfce2a2fd09d4e181efbe10f76c128b031229c765b766fb46c48d28d9517d30f48a1c57b
- SSDEEP 24576:g/YBrk0rLj2de4seIzIk3vj6iIoEBIO2AMtmKoqdVGxANdmL0LU8PxLJNeL5Ta:64w0L2FIzI46ixEs1mnBmS0LtXNek
- TLSH T15DA5F1B3B3694E86D2334735889183F48BA56FD48768838946F8CD37F8428772D699CD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables manipulated with Fody
-
Detects executables packed with unregistered version of .NET Reactor
-
.NET Reactor proctector
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.