General
- Target 2026-07-15_0f334b68f82bee7d51462d8fb2b56d5e_cobalt-strike_icedid_satacom_vidar
- Size 1.7MB
- Sample260715-xpy9aacw7m
- SHA256 00f821e9eade5a68110c1bd4c3cc57f77f59ccd5634ed90a43235f658dad5efc
- MD5 0f334b68f82bee7d51462d8fb2b56d5e
- SHA1 b2dd2b97b3300c5290ddd8df34c46f37931559b3
- SHA512 b224d5606ff9dea354317823ad391f6094dea366df3ddb0dbf06a13119db14c4b6422e53df6a9c7b925b0774aeb43f4426071d5ee15ad58534cf57b1e7da0d47
- SSDEEP 12288:ZxDGMOHJwljyjwoTxLGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWX:ZxDewlOjwG7nQ/tbw/2Mkjy6Fr7g0oX
- TLSH T11E859D79E6B844C5E6BAB43886538559E222FC09475196CF3A687F063F377D0FA7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_0f334b68f82bee7d51462d8fb2b56d5e_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_0f334b68f82bee7d51462d8fb2b56d5e_cobalt-strike_icedid_satacom_vidar
- Size 1.7MB
- SHA256 00f821e9eade5a68110c1bd4c3cc57f77f59ccd5634ed90a43235f658dad5efc
- MD5 0f334b68f82bee7d51462d8fb2b56d5e
- SHA1 b2dd2b97b3300c5290ddd8df34c46f37931559b3
- SHA512 b224d5606ff9dea354317823ad391f6094dea366df3ddb0dbf06a13119db14c4b6422e53df6a9c7b925b0774aeb43f4426071d5ee15ad58534cf57b1e7da0d47
- SSDEEP 12288:ZxDGMOHJwljyjwoTxLGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HjoMWX:ZxDewlOjwG7nQ/tbw/2Mkjy6Fr7g0oX
- TLSH T11E859D79E6B844C5E6BAB43886538559E222FC09475196CF3A687F063F377D0FA7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1