2026-08-04_f07622e0132a631e738043ef3e69db24_cobalt-strike_icedid_satacom_vidar

General

Target
2026-08-04_f07622e0132a631e738043ef3e69db24_cobalt-strike_icedid_satacom_vidar
Size 115KB
Sample260804-qs9e4abf44
SHA256 9e65480d8ba9f744b86acef527ca41c4de80797a47a9224729a5ec31a1ba4c17
MD5 f07622e0132a631e738043ef3e69db24
SHA1 91c93943b5c5301765580bcd60d251c3652f527c
SHA512 239904b60ef270820899fa01bf89c6e6592dcd3b78b9906cfac15759d2e99506c12efd4293e5f463c11c82a6db71abf3363ab255c9daa7f8767a0f6e9a82c86c
SSDEEP 3072:9NEJHdLSja3D1spS7XEaQaX9BHv39YMcHt:UHdLSjwD7TQaX9l1a
TLSH
T1F6B36C5BB3A931F8E5778238C8514A45EBB2F83146609F9F03A446961F233E19D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_f07622e0132a631e738043ef3e69db24_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-08-04_f07622e0132a631e738043ef3e69db24_cobalt-strike_icedid_satacom_vidar

.exe 115KB

2026-08-04_f07622e0132a631e738043ef3e69db24_cobalt-strike_icedid_satacom_vidar

IMPHASH 28bf0d10cae661d031dbe0baae974725
SHA256 9e65480d8ba9f744b86acef527ca41c4de80797a47a9224729a5ec31a1ba4c17
MD5 f07622e0132a631e738043ef3e69db24
SHA1 91c93943b5c5301765580bcd60d251c3652f527c
SHA512 239904b60ef270820899fa01bf89c6e6592dcd3b78b9906cfac15759d2e99506c12efd4293e5f463c11c82a6db71abf3363ab255c9daa7f8767a0f6e9a82c86c
SSDEEP 3072:9NEJHdLSja3D1spS7XEaQaX9BHv39YMcHt:UHdLSjwD7TQaX9l1a
TLSH
T1F6B36C5BB3A931F8E5778238C8514A45EBB2F83146609F9F03A446961F233E19D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4732

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetFileType HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetProcessHeap ReadFile GetConsoleMode ReadConsoleW GetFileSizeEx SetFilePointerEx GetConsoleOutputCP HeapSize HeapReAlloc FlushFileBuffers CloseHandle CreateFileW RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_f07622e0132a631e738043ef3e69db24_cobalt-strike_icedid_satacom_vidar

kernel32

generic