General
- Target 2026-07-23_af2c8fbeb83919b72a3cc2174e0b6342_cobalt-strike_icedid_satacom_vidar
- Size 1.8MB
- Sample260723-jlylpayvfv
- SHA256 4b3d843c107631908471e4b1e0a0a0821a683cbdca2ae3ed83f75436c52a4547
- MD5 af2c8fbeb83919b72a3cc2174e0b6342
- SHA1 7e5b379be8eab3f4be64d62ea82b19cf34b45d6b
- SHA512 c49d9f29a45b98c21109c39186058fec393b295f591484fcb5f5ad6abab65964e4fcb99b2a1e4234deb1c6aca8c6f7eeb9578d0fd1118cbf6cc3c3601bd19030
- SSDEEP 24576:zdy4mcrQDfwsqjnhMgeiCl7G0nehbGZpbD:oh4Dmg27RnWGj
- TLSH T18385E05BB26850FAE86B913CC883D509E632B8124B21D7AF17A1466E3F337D05E3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_af2c8fbeb83919b72a3cc2174e0b6342_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_af2c8fbeb83919b72a3cc2174e0b6342_cobalt-strike_icedid_satacom_vidar
- Size 1.8MB
- SHA256 4b3d843c107631908471e4b1e0a0a0821a683cbdca2ae3ed83f75436c52a4547
- MD5 af2c8fbeb83919b72a3cc2174e0b6342
- SHA1 7e5b379be8eab3f4be64d62ea82b19cf34b45d6b
- SHA512 c49d9f29a45b98c21109c39186058fec393b295f591484fcb5f5ad6abab65964e4fcb99b2a1e4234deb1c6aca8c6f7eeb9578d0fd1118cbf6cc3c3601bd19030
- SSDEEP 24576:zdy4mcrQDfwsqjnhMgeiCl7G0nehbGZpbD:oh4Dmg27RnWGj
- TLSH T18385E05BB26850FAE86B913CC883D509E632B8124B21D7AF17A1466E3F337D05E3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1