2026-07-30_804fc8a5fe4a02d7d1fc753471dc8e5e_cobalt-strike_icedid_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_804fc8a5fe4a02d7d1fc753471dc8e5e_cobalt-strike_icedid_satacom_vidar
Size 1.7MB
Sample260730-srbhsack4s
SHA256 87a3de78499b1629a1895930a5425962b33fb705a4f264aad240893cdd412ebd
MD5 804fc8a5fe4a02d7d1fc753471dc8e5e
SHA1 6ce472a681c848125f2fcfc0aea12d7d8a1a1b97
SHA512 4207496cd878b4061fbc7bdd21bd96a39501317f5452aadcd9ff1ab4d52cd1c5973615ff3690c658f27336e61a32b0df4e46affc1ed32e001f1e3e18c9dc9c18
SSDEEP 12288:+IEAdOdBzLExIjNl9WXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/nT:oAMixIjwsqjnhMgeiCl7G0nehbGZpbD
TLSH
T1EA853A9712D024A6EFBD0E30870E53687B912CFAC431F989EE02F6FA45357644A5793B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_804fc8a5fe4a02d7d1fc753471dc8e5e_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-07-30_804fc8a5fe4a02d7d1fc753471dc8e5e_cobalt-strike_icedid_satacom_vidar

.exe 1.7MB

2026-07-30_804fc8a5fe4a02d7d1fc753471dc8e5e_cobalt-strike_icedid_satacom_vidar

IMPHASH 2a897660112acf58740b693cfbbf672a
SHA256 87a3de78499b1629a1895930a5425962b33fb705a4f264aad240893cdd412ebd
MD5 804fc8a5fe4a02d7d1fc753471dc8e5e
SHA1 6ce472a681c848125f2fcfc0aea12d7d8a1a1b97
SHA512 4207496cd878b4061fbc7bdd21bd96a39501317f5452aadcd9ff1ab4d52cd1c5973615ff3690c658f27336e61a32b0df4e46affc1ed32e001f1e3e18c9dc9c18
SSDEEP 12288:+IEAdOdBzLExIjNl9WXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/nT:oAMixIjwsqjnhMgeiCl7G0nehbGZpbD
TLSH
T1EA853A9712D024A6EFBD0E30870E53687B912CFAC431F989EE02F6FA45357644A5793B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10408

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SendMessageW DefWindowProcW PostQuitMessage RegisterClassExW TranslateMessage ShowWindow SetForegroundWindow FindWindowW LoadCursorW DispatchMessageW CreateWindowExW GetMessageW IsDialogMessageW LoadIconW

gdi32

GetStockObject

shell32

ShellExecuteW

sider

?unsetHook@@YAX_N@Z ?log_@@YAXPEB_WZZ ?start_log_@@YAXPEB_WZZ ?open_log_@@YAXPEB_WZZ ?close_log_@@YAXXZ ?append_to_log_@@YAXPEB_WZZ ?get_module_version@@YAXPEAUHINSTANCE__@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?get_start_game@@YA_NAEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?start_minimized@@YA_NXZ ?setHook@@YAXXZ

kernel32

CloseHandle CreateFileW SetFilePointerEx WriteConsoleW GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap GetConsoleMode DeleteCriticalSection LCMapStringW GetStringTypeW GetFileType SetStdHandle FreeEnvironmentStringsW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetEnvironmentStringsW RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

374KB

Virtual Size

374KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_804fc8a5fe4a02d7d1fc753471dc8e5e_cobalt-strike_icedid_satacom_vidar

user32

gdi32

shell32

sider

kernel32

generic