General
- Target 2026-07-21_d20b53c6f9fb7c2b61f127b80a5d8edf_cobalt-strike_icedid_satacom_vidar
- Size 1.6MB
- Sample260721-qdpgdabr5t
- SHA256 01d854ecb5e6d1e659dd0cbbb686b6e73abe8d167ba376914f6d4276d2a8ac94
- MD5 d20b53c6f9fb7c2b61f127b80a5d8edf
- SHA1 22aeaa6e91d6870ac0f668861b40d5b8b9a25004
- SHA512 6b4a5c8896a278800fc1116611880351cb701b62299d6fee66dc5e7f0fa7012852ee01aff3b98f830c4b5d072198a4f06ecfa22fdaa6f7e507c2985e254e20b1
- SSDEEP 24576:axDnwlOjwGx+L6VMRCPU6CENltmVVdpx7fLrQWd:eTAOj86ZU6CENlc7dpJLrQWd
- TLSH T1B6758C79E6B804D5E2BAB53882638559E222FC09475196CF76687F063F37BD0F97A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_d20b53c6f9fb7c2b61f127b80a5d8edf_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_d20b53c6f9fb7c2b61f127b80a5d8edf_cobalt-strike_icedid_satacom_vidar
- Size 1.6MB
- SHA256 01d854ecb5e6d1e659dd0cbbb686b6e73abe8d167ba376914f6d4276d2a8ac94
- MD5 d20b53c6f9fb7c2b61f127b80a5d8edf
- SHA1 22aeaa6e91d6870ac0f668861b40d5b8b9a25004
- SHA512 6b4a5c8896a278800fc1116611880351cb701b62299d6fee66dc5e7f0fa7012852ee01aff3b98f830c4b5d072198a4f06ecfa22fdaa6f7e507c2985e254e20b1
- SSDEEP 24576:axDnwlOjwGx+L6VMRCPU6CENltmVVdpx7fLrQWd:eTAOj86ZU6CENlc7dpJLrQWd
- TLSH T1B6758C79E6B804D5E2BAB53882638559E222FC09475196CF76687F063F37BD0F97A300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory