Extracted

• • Target
    2026-07-15_5588006c5a77bdac87db44f477c16e25_cobalt-strike_icedid_satacom_vidar
  • Size 14.2MB
  • SHA256 7db804d4a54fc3cd243d4bf2d2120881b8a5d191582afca2bb7e07e34da7dc8a
  • MD5 5588006c5a77bdac87db44f477c16e25
  • SHA1 e056dae4ee20058dbca10e41b4b06a891ab4eb5d
  • SHA512 0db3465cb1294a0f22b6e920164469163e60d37827c84cd640d001dc60771bb9b5c8cdbb5a3bc02c06922615023b35ea1e1617805475489731101134e161f235
  • SSDEEP 393216:wLnCkUcSjj4qmNK+FJ2r8fIgwZXmcUjpuOY3G2LNwepl6:wLCkUcSjYpM4m4cguzGgwef6
  • TLSH
    T1CDE63378B4CAD0DAF1564539D865EDC523333CAE1920039B2AC21B0B3F69FD5CEE9661
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  buildcosturadiscoverystealcpackerpersistencepyinstallerspywarestealer

  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Detects Reflective DLL injection artifacts

  • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)

  • Detects executables embedding registry key / value combination indicative of disabling Windows Defen

  • Downloads MZ/PE file

  • Sets service image path in registry

    This determines the executable launched when a service starts. It can be used to establish persistence.

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2