General
- Target 2026-08-04_2f5147f481e82f8714261ea5b4a476d5_cobalt-strike_icedid_satacom_vidar
- Size 676KB
- Sample260804-jp8wtsam4x
- SHA256 6b91e2e119c4b6ebbfdd2cf27d011067ac04a3f2c34783207cf03cfec320aff8
- MD5 2f5147f481e82f8714261ea5b4a476d5
- SHA1 47071bd6cd96af458ff6c86049a5ddfcf050d2d6
- SHA512 fbab8d1729c43f61e6e71c957b7cae5b93f91b95add7864dc5e2e5d322037d0775b6d2da3160f849a40b5a39c792a3f2ec2971c8b606b68afff8bb8b41558260
- SSDEEP 12288:r2VHVF+SdFpLgxsoCtbgNYXj9AWTb1MPBNIzhS+G7umvQzh:aVSSLexL2gyX6WH1Mr3nQzh
- TLSH T10EE4125B72B034EFC43793788891453CA722FDA679228B4F965871862E3A3854D3DFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2f5147f481e82f8714261ea5b4a476d5_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2f5147f481e82f8714261ea5b4a476d5_cobalt-strike_icedid_satacom_vidar
- Size 676KB
- SHA256 6b91e2e119c4b6ebbfdd2cf27d011067ac04a3f2c34783207cf03cfec320aff8
- MD5 2f5147f481e82f8714261ea5b4a476d5
- SHA1 47071bd6cd96af458ff6c86049a5ddfcf050d2d6
- SHA512 fbab8d1729c43f61e6e71c957b7cae5b93f91b95add7864dc5e2e5d322037d0775b6d2da3160f849a40b5a39c792a3f2ec2971c8b606b68afff8bb8b41558260
- SSDEEP 12288:r2VHVF+SdFpLgxsoCtbgNYXj9AWTb1MPBNIzhS+G7umvQzh:aVSSLexL2gyX6WH1Mr3nQzh
- TLSH T10EE4125B72B034EFC43793788891453CA722FDA679228B4F965871862E3A3854D3DFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1