2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar
Size 1.1MB
Sample260731-dwbl1sshja
SHA256 c7cd79925e718c17eced99d17ddfe275181d8a174ac85fb8a469eefdc0e19895
MD5 2c2372ef9fdd10eec144ab4c441e63da
SHA1 a1450c4345c8e28bc4c614ec8b2e2ca7a092efb7
SHA512 8529c9f88bd5f04c6f469e88caf0e3bcb330e3a80151a30b8e504abbf24ea9fab4b51b593bcaa129cddda9111683db6f45752cebb0790c1e59bcad68ceb8a2c0
SSDEEP 24576:2OYBr7Ci+Xu+OGtBeGB0XSjJu/4Wq6qgnq2tZDFWr+Epue7PdU:V4uJZBxfj9WqC/DFO+EgoPy
TLSH
T1B945220BB7A525F4D0F24139C8918A56EB72B8184B5499DF436807BA4F236D09F3BBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar

File Explorer

2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar

.exe 1.1MB

2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar

IMPHASH bb092204a649e82cf06c7f0a631fde81
SHA256 c7cd79925e718c17eced99d17ddfe275181d8a174ac85fb8a469eefdc0e19895
MD5 2c2372ef9fdd10eec144ab4c441e63da
SHA1 a1450c4345c8e28bc4c614ec8b2e2ca7a092efb7
SHA512 8529c9f88bd5f04c6f469e88caf0e3bcb330e3a80151a30b8e504abbf24ea9fab4b51b593bcaa129cddda9111683db6f45752cebb0790c1e59bcad68ceb8a2c0
SSDEEP 24576:2OYBr7Ci+Xu+OGtBeGB0XSjJu/4Wq6qgnq2tZDFWr+Epue7PdU:V4uJZBxfj9WqC/DFO+EgoPy
TLSH
T1B945220BB7A525F4D0F24139C8918A56EB72B8184B5499DF436807BA4F236D09F3BBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

42904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SizeofResource InitializeCriticalSectionEx WaitForSingleObject FreeResource MultiByteToWideChar GetLastError LoadLibraryA LockResource GlobalAlloc GlobalFree CloseHandle CreateThread LoadResource FindResourceW GetProcAddress GlobalLock DeleteCriticalSection GetCurrentProcessId GetModuleHandleW GlobalUnlock WriteConsoleW FlushFileBuffers GetStringTypeW GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc HeapSize WideCharToMultiByte LCMapStringW CompareStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree SetStdHandle GetConsoleOutputCP GetConsoleMode GetCommandLineW GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW ExitProcess GetFileType CreateFileW SetFilePointerEx LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer SetLastError RtlPcToFileHeader RtlUnwindEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW RaiseException EnterCriticalSection LeaveCriticalSection LocalFree

user32

LoadCursorW TranslateMessage EnumWindows GetClientRect KillTimer PostQuitMessage SystemParametersInfoW SetWinEventHook UnhookWinEvent InvalidateRect GetAncestor BeginPaint EndPaint DrawTextW SetTimer DispatchMessageW IsWindow ShowWindow GetWindowLongW GetWindowThreadProcessId GetMessageW DefWindowProcW PostMessageW DestroyWindow IsWindowVisible SetWindowPos CreateWindowExW RegisterClassExW

ole32

CreateStreamOnHGlobal OleInitialize

oleaut32

SafeArrayAccessData SafeArrayCreateVector SafeArrayCreate SafeArrayUnaccessData SysAllocString SysFreeString VariantInit SafeArrayDestroy VariantClear

gdiplus

GdiplusStartup GdiplusShutdown GdipGetImageHeight GdipCreatePen1 GdipDeletePen GdipGetImageWidth GdipDeleteGraphics GdipCreateFromHDC GdipFree GdipLoadImageFromStreamICM GdipSetPixelOffsetMode GdipDrawLine GdipSetInterpolationMode GdipSetSmoothingMode GdipDisposeImage GdipDrawImageRectI GdipAlloc GdipCloneImage

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-31_2c2372ef9fdd10eec144ab4c441e63da_cobalt-strike_icedid_satacom_stealc_vidar

kernel32

user32

ole32

oleaut32

gdiplus

generic