2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar
Size 2.0MB
Sample260708-e2dh8sbv7r
SHA256 96aedea48a59683d772a62c9eaaaa7a8d42ace01360efef2d81f602dc5a35a06
MD5 88fa4a305dedf4eaa48f4800316d2dd7
SHA1 b3220746fd26d2413cc6f1f9f9cc83e70a227fe2
SHA512 6c14f894b4e80f7f61bab8b52b3d3e68b26b41cc1f3956712cb1042fcfce2a2fd09d4e181efbe10f76c128b031229c765b766fb46c48d28d9517d30f48a1c57b
SSDEEP 24576:g/YBrk0rLj2de4seIzIk3vj6iIoEBIO2AMtmKoqdVGxANdmL0LU8PxLJNeL5Ta:64w0L2FIzI46ixEs1mnBmS0LtXNek
TLSH
T15DA5F1B3B3694E86D2334735889183F48BA56FD48768838946F8CD37F8428772D699CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar

File Explorer

2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar

.exe 2.0MB

2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar

IMPHASH bb092204a649e82cf06c7f0a631fde81
SHA256 96aedea48a59683d772a62c9eaaaa7a8d42ace01360efef2d81f602dc5a35a06
MD5 88fa4a305dedf4eaa48f4800316d2dd7
SHA1 b3220746fd26d2413cc6f1f9f9cc83e70a227fe2
SHA512 6c14f894b4e80f7f61bab8b52b3d3e68b26b41cc1f3956712cb1042fcfce2a2fd09d4e181efbe10f76c128b031229c765b766fb46c48d28d9517d30f48a1c57b
SSDEEP 24576:g/YBrk0rLj2de4seIzIk3vj6iIoEBIO2AMtmKoqdVGxANdmL0LU8PxLJNeL5Ta:64w0L2FIzI46ixEs1mnBmS0LtXNek
TLSH
T15DA5F1B3B3694E86D2334735889183F48BA56FD48768838946F8CD37F8428772D699CD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SizeofResource InitializeCriticalSectionEx WaitForSingleObject FreeResource MultiByteToWideChar GetLastError LoadLibraryA LockResource GlobalAlloc GlobalFree CloseHandle CreateThread LoadResource FindResourceW GetProcAddress GlobalLock DeleteCriticalSection GetCurrentProcessId GetModuleHandleW GlobalUnlock WriteConsoleW FlushFileBuffers GetStringTypeW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc HeapSize WideCharToMultiByte LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree SetStdHandle GetConsoleOutputCP GetConsoleMode GetCommandLineW GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess GetFileType CreateFileW SetFilePointerEx LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer SetLastError RtlPcToFileHeader RtlUnwindEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection LocalFree

user32

LoadCursorW TranslateMessage EnumWindows GetClientRect KillTimer PostQuitMessage SystemParametersInfoW SetWinEventHook UnhookWinEvent InvalidateRect GetAncestor BeginPaint EndPaint DrawTextW SetTimer DispatchMessageW IsWindow ShowWindow GetWindowLongW GetWindowThreadProcessId GetMessageW DefWindowProcW PostMessageW DestroyWindow IsWindowVisible SetWindowPos CreateWindowExW RegisterClassExW

ole32

CreateStreamOnHGlobal OleInitialize

oleaut32

SafeArrayAccessData SafeArrayCreateVector SafeArrayCreate SafeArrayUnaccessData SysAllocString SysFreeString VariantInit SafeArrayDestroy VariantClear

gdiplus

GdiplusStartup GdiplusShutdown GdipGetImageHeight GdipCreatePen1 GdipDeletePen GdipGetImageWidth GdipDeleteGraphics GdipCreateFromHDC GdipFree GdipLoadImageFromStreamICM GdipSetPixelOffsetMode GdipDrawLine GdipSetInterpolationMode GdipSetSmoothingMode GdipDisposeImage GdipDrawImageRectI GdipAlloc GdipCloneImage

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_88fa4a305dedf4eaa48f4800316d2dd7_cobalt-strike_icedid_satacom_stealc_vidar

kernel32

user32

ole32

oleaut32

gdiplus

generic