General
- Target 2026-07-23_5c679871fa1161cdf87b4dbd05dbd19d_cobalt-strike_icedid_satacom_vidar
- Size 357KB
- Sample260723-x3fzvsvhnb
- SHA256 776d0938c28d05163fa083ed1455b462b1266c22b81506071981af1b368764af
- MD5 5c679871fa1161cdf87b4dbd05dbd19d
- SHA1 00f1213b9cc91f8d14d42c79bd5a006fe4a08e78
- SHA512 5edfabaf1aed9e0be9e3d40d1ccd2fcd95bdc48d9348459bbe16a77a7050ad8a4a1794d29a6463c021ee14223a78dd5aebc67338faedf7786089f8ba4a1d95bf
- SSDEEP 6144:DLjOMiQPoDjo4ZYOVKS2bwJz8RmQf0WIiEnm2j7ZvINkn0srBQVM+5:DAQgDjoOktsORmQf07iSvN0hs
- TLSH T19074F147FAF432E9E1264678C4750E06A73AF4BD0A348D6F035C42696F366E19D3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_5c679871fa1161cdf87b4dbd05dbd19d_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_5c679871fa1161cdf87b4dbd05dbd19d_cobalt-strike_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_5c679871fa1161cdf87b4dbd05dbd19d_cobalt-strike_icedid_satacom_vidar
- Size 357KB
- SHA256 776d0938c28d05163fa083ed1455b462b1266c22b81506071981af1b368764af
- MD5 5c679871fa1161cdf87b4dbd05dbd19d
- SHA1 00f1213b9cc91f8d14d42c79bd5a006fe4a08e78
- SHA512 5edfabaf1aed9e0be9e3d40d1ccd2fcd95bdc48d9348459bbe16a77a7050ad8a4a1794d29a6463c021ee14223a78dd5aebc67338faedf7786089f8ba4a1d95bf
- SSDEEP 6144:DLjOMiQPoDjo4ZYOVKS2bwJz8RmQf0WIiEnm2j7ZvINkn0srBQVM+5:DAQgDjoOktsORmQf07iSvN0hs
- TLSH T19074F147FAF432E9E1264678C4750E06A73AF4BD0A348D6F035C42696F366E19D3AB31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Reflective DLL injection artifacts
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1