302707364b9957f41ab377a7ef0b4886469dcae70ccca7dbc124aba6af961949

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/07/2026, 07:51

Target
2026-07-17_839aeebc291c1cfee20a3c86cbac8c8d_cobalt-strike_icedid_satacom_vidar.exe
Size 287KB
Sample260717-jpvzzaas61
SHA256 302707364b9957f41ab377a7ef0b4886469dcae70ccca7dbc124aba6af961949
MD5 839aeebc291c1cfee20a3c86cbac8c8d
SHA1 648a14fdedb13189c4a6162b1963cf55aac53562
SHA512 fe8ff7092b5de517e2b3bf95b6119bcc8f511feedc05de8f4d6f6284706738adc5a47a040feffb4534427f8d26263a2ca5d2946b1f09435420cee7fc35da2de7
SSDEEP 6144:X8ohGpel4VQg/U+Dgx3bMAVVzddi6jWGPxTQ6G:X8otlK53DgZMSVFjW0xk6G
TLSH
T1E8546C56B6A50CFCE5B7C178C8925909D772F81A0B2597AF036042562F73BD48E3FB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
608	2026-07-17_839aeebc291c1cfee20a3c86cbac8c8d_cobalt-strike_icedid_satacom_vidar.exe
608	2026-07-17_839aeebc291c1cfee20a3c86cbac8c8d_cobalt-strike_icedid_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-17_839aeebc291c1cfee20a3c86cbac8c8d_cobalt-strike_icedid_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-17_839aeebc291c1cfee20a3c86cbac8c8d_cobalt-strike_icedid_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:608