General
- Target 2026-07-21_1fa9649726677ec63391f8c5aaace46d_cobalt-strike_icedid_stealc_vidar
- Size 1.9MB
- Sample260721-db9nbaew9s
- SHA256 d12e6b7dd45f5ef9df0025a7e688d14fcf58b693244df925e2e013c98a448957
- MD5 1fa9649726677ec63391f8c5aaace46d
- SHA1 08d649c13b9b9f8e5be3def650281fe4bf3d0b1a
- SHA512 67301e325e775cdbdd68a87f599103dd4f8abe446996c0f0f58af0decf73df3d940792fd92dda6f809e78446b9deaffb0fddfdc175c4547fa839d237c38bd2d0
- SSDEEP 24576:/IO57nnTvIOfOQ+M3WAvbdlUywk9UG8amWJ0+/1m7F:zFbIOmQTHU89UG8aJ+F
- TLSH T1B59533BE8E2E57DAC5AEC9F0F535D2D6A9002444A4B697C637C0079D67230B0ECE72D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_1fa9649726677ec63391f8c5aaace46d_cobalt-strike_icedid_stealc_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_1fa9649726677ec63391f8c5aaace46d_cobalt-strike_icedid_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_1fa9649726677ec63391f8c5aaace46d_cobalt-strike_icedid_stealc_vidar
- Size 1.9MB
- SHA256 d12e6b7dd45f5ef9df0025a7e688d14fcf58b693244df925e2e013c98a448957
- MD5 1fa9649726677ec63391f8c5aaace46d
- SHA1 08d649c13b9b9f8e5be3def650281fe4bf3d0b1a
- SHA512 67301e325e775cdbdd68a87f599103dd4f8abe446996c0f0f58af0decf73df3d940792fd92dda6f809e78446b9deaffb0fddfdc175c4547fa839d237c38bd2d0
- SSDEEP 24576:/IO57nnTvIOfOQ+M3WAvbdlUywk9UG8amWJ0+/1m7F:zFbIOmQTHU89UG8aJ+F
- TLSH T1B59533BE8E2E57DAC5AEC9F0F535D2D6A9002444A4B697C637C0079D67230B0ECE72D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext