General
- Target 2026-07-31_c8669b41482624a9ce6aa6e4c03f5ba4_cobalt-strike_icedid_satacom_vidar
- Size 867KB
- Sample260731-277etsac25
- SHA256 23739a45df030f323b381e17a60db6e91d179e71c72a29c10418527c412977e0
- MD5 c8669b41482624a9ce6aa6e4c03f5ba4
- SHA1 d1d75198b4d6b6aa6246403315d5f2d4905322f9
- SHA512 217bc2d2befb017f3951043bb7aa321a9e895989db64e86416e54a6ddd8f5355c2473a29ca3e351e5396e3cb8618d46e1cb15dbd883f4c86ccae79e674098a33
- SSDEEP 12288:vd6kS9XPBu4SU3YGQXyFczYEjhVX8DqE7IaHsIwateJVcHt/mQtEIRbObov+:vG5H3vQXywDIOL
- TLSH T17C152823E5940D73D2B2433A9DA76902FF26127F82101D4A79FC921C1FB275A463BF99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c8669b41482624a9ce6aa6e4c03f5ba4_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c8669b41482624a9ce6aa6e4c03f5ba4_cobalt-strike_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c8669b41482624a9ce6aa6e4c03f5ba4_cobalt-strike_icedid_satacom_vidar
- Size 867KB
- SHA256 23739a45df030f323b381e17a60db6e91d179e71c72a29c10418527c412977e0
- MD5 c8669b41482624a9ce6aa6e4c03f5ba4
- SHA1 d1d75198b4d6b6aa6246403315d5f2d4905322f9
- SHA512 217bc2d2befb017f3951043bb7aa321a9e895989db64e86416e54a6ddd8f5355c2473a29ca3e351e5396e3cb8618d46e1cb15dbd883f4c86ccae79e674098a33
- SSDEEP 12288:vd6kS9XPBu4SU3YGQXyFczYEjhVX8DqE7IaHsIwateJVcHt/mQtEIRbObov+:vG5H3vQXywDIOL
- TLSH T17C152823E5940D73D2B2433A9DA76902FF26127F82101D4A79FC921C1FB275A463BF99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution