2026-08-04_8e7cbb5ce244c1f7a0f020ea0f0e999a_cobalt-strike_icedid_satacom_vidar

General

Target
2026-08-04_8e7cbb5ce244c1f7a0f020ea0f0e999a_cobalt-strike_icedid_satacom_vidar
Size 115KB
Sample260804-sd6f1agr6t
SHA256 0b0b9194a713c3994b814b1297ff3159f48e42f42f403707cf54adc83c276c54
MD5 8e7cbb5ce244c1f7a0f020ea0f0e999a
SHA1 e7cde3641dba3a7bee39c9431322736bae9a0d67
SHA512 c718e5ab93cb31669be15a58b90965ebbe923287b4e8bb0a687c63a33e9d912a9d391c46bca33d1962d357b67f5918012e044d6fbf9a8b1194a8333c93c01129
SSDEEP 3072:9NEJHdLSja3D1spS7XEaQaX9BHv39YMcHt:UHdLSjwD7TQaX9l1a
TLSH
T121B36B5BB3A931F8E5778238C8514A45EBB2F83146609F9F03A446961F233E19D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_8e7cbb5ce244c1f7a0f020ea0f0e999a_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-08-04_8e7cbb5ce244c1f7a0f020ea0f0e999a_cobalt-strike_icedid_satacom_vidar

.exe 115KB

2026-08-04_8e7cbb5ce244c1f7a0f020ea0f0e999a_cobalt-strike_icedid_satacom_vidar

IMPHASH 28bf0d10cae661d031dbe0baae974725
SHA256 0b0b9194a713c3994b814b1297ff3159f48e42f42f403707cf54adc83c276c54
MD5 8e7cbb5ce244c1f7a0f020ea0f0e999a
SHA1 e7cde3641dba3a7bee39c9431322736bae9a0d67
SHA512 c718e5ab93cb31669be15a58b90965ebbe923287b4e8bb0a687c63a33e9d912a9d391c46bca33d1962d357b67f5918012e044d6fbf9a8b1194a8333c93c01129
SSDEEP 3072:9NEJHdLSja3D1spS7XEaQaX9BHv39YMcHt:UHdLSjwD7TQaX9l1a
TLSH
T121B36B5BB3A931F8E5778238C8514A45EBB2F83146609F9F03A446961F233E19D3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4732

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetFileType HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetProcessHeap ReadFile GetConsoleMode ReadConsoleW GetFileSizeEx SetFilePointerEx GetConsoleOutputCP HeapSize HeapReAlloc FlushFileBuffers CloseHandle CreateFileW RtlUnwind

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_8e7cbb5ce244c1f7a0f020ea0f0e999a_cobalt-strike_icedid_satacom_vidar

kernel32

generic