General
- Target 2026-07-09_db9c1405ca03e900ce32fcba5f8d7c84_cobalt-strike_icedid_vidar
- Size 827KB
- Sample260709-pavnjsay2w
- SHA256 0c62e40561984bbccc566ae6adcf780c5d13b44cc6a9e16d9438f6681c30f445
- MD5 db9c1405ca03e900ce32fcba5f8d7c84
- SHA1 b20e7a3dfdf2375de7de3995cbc9a5d2a076f3af
- SHA512 edc01316665eb7fd451e84ef386bfac6b56b736446e08b938eb7feaf6e07a9015c5f49dcc9938276a05f30e629a1b92acf62dca71548fbe88f73ed991bc83340
- SSDEEP 12288:igXZ86a0vw0KfQn1lfKS5YcI+mN+EXCPMZ5y7BqHmqkfMXzN4g2:igJ86aUdr1gS5YwWXCPOyIGLf4pI
- TLSH T1D2057C2ABFA841F8D177C179C9528657F3F2B8560A349B5F12E4436E2F272605F2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_db9c1405ca03e900ce32fcba5f8d7c84_cobalt-strike_icedid_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_db9c1405ca03e900ce32fcba5f8d7c84_cobalt-strike_icedid_vidar.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_db9c1405ca03e900ce32fcba5f8d7c84_cobalt-strike_icedid_vidar
- Size 827KB
- SHA256 0c62e40561984bbccc566ae6adcf780c5d13b44cc6a9e16d9438f6681c30f445
- MD5 db9c1405ca03e900ce32fcba5f8d7c84
- SHA1 b20e7a3dfdf2375de7de3995cbc9a5d2a076f3af
- SHA512 edc01316665eb7fd451e84ef386bfac6b56b736446e08b938eb7feaf6e07a9015c5f49dcc9938276a05f30e629a1b92acf62dca71548fbe88f73ed991bc83340
- SSDEEP 12288:igXZ86a0vw0KfQn1lfKS5YcI+mN+EXCPMZ5y7BqHmqkfMXzN4g2:igJ86aUdr1gS5YwWXCPOyIGLf4pI
- TLSH T1D2057C2ABFA841F8D177C179C9528657F3F2B8560A349B5F12E4436E2F272605F2E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.