General
- Target 2026-07-09_1051581f04865c9785edce149a32645e_cobalt-strike_icedid_satacom_vidar
- Size 658KB
- Sample260709-a3jz7aa18l
- SHA256 0455137a40fd32c672b3e1a3d7e75023999965451a4ee7f1b4f1a3c4ee138960
- MD5 1051581f04865c9785edce149a32645e
- SHA1 a56d9b6c40e5087bbc861cb578f128ca66a751f6
- SHA512 21217c592cd5b10b151a9ce745dd5a7faa3ac9340abd40782737300776db1d7da059eec41a9f15010c3d6d947d4fc209a6c7212e0c007f51598470d228028bbd
- SSDEEP 3072:wQ/EJhz2WnBUCsyfYDbMPrJERznr8SG+/Kt0igG8dL9jq75:XEbaWnBUCGAnwKydGIjY5
- TLSH T19CE4D59261801DEBD3ECFE3CD0664A0DF325ACA7A913AF0B4D947D573E722831D16A19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_1051581f04865c9785edce149a32645e_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_1051581f04865c9785edce149a32645e_cobalt-strike_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_1051581f04865c9785edce149a32645e_cobalt-strike_icedid_satacom_vidar
- Size 658KB
- SHA256 0455137a40fd32c672b3e1a3d7e75023999965451a4ee7f1b4f1a3c4ee138960
- MD5 1051581f04865c9785edce149a32645e
- SHA1 a56d9b6c40e5087bbc861cb578f128ca66a751f6
- SHA512 21217c592cd5b10b151a9ce745dd5a7faa3ac9340abd40782737300776db1d7da059eec41a9f15010c3d6d947d4fc209a6c7212e0c007f51598470d228028bbd
- SSDEEP 3072:wQ/EJhz2WnBUCsyfYDbMPrJERznr8SG+/Kt0igG8dL9jq75:XEbaWnBUCGAnwKydGIjY5
- TLSH T19CE4D59261801DEBD3ECFE3CD0664A0DF325ACA7A913AF0B4D947D573E722831D16A19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.