2026-08-07_436b31496f39341c6116d4ab2568665c_cobalt-strike_icedid_satacom_vidar

General

Target
2026-08-07_436b31496f39341c6116d4ab2568665c_cobalt-strike_icedid_satacom_vidar
Size 652KB
Sample260807-tp3d6a11ex
SHA256 340f9fc76cd02752f0dd1e7c554fe7d7dbd3eef09e526c02460a89918c85dc3e
MD5 436b31496f39341c6116d4ab2568665c
SHA1 5fceea24b62e09575c00cb637185d9c6b1f224f1
SHA512 2c50884bd73d397a5099e2a717180ad6dca6c0b75c3e5ad1f21276c7ad353ce7c3b6d1603d34deb1dfdae099e4415e9753ff8f81cee17c914134472f8fbad283
SSDEEP 6144:xaMjvuUwZpxUhLS+Lj9qQ3mNH6H3MQuWyhmMIQ54ofy0IkY+ZjOPT:xtVwZpKhWi4QP2V15Ml5P
TLSH
T1EDE49CC9A4C9D6DDCB9073B580DDBF56B5EC202A71AD81091D62BEC63BF9B2028D135C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_436b31496f39341c6116d4ab2568665c_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-08-07_436b31496f39341c6116d4ab2568665c_cobalt-strike_icedid_satacom_vidar

.exe 652KB

2026-08-07_436b31496f39341c6116d4ab2568665c_cobalt-strike_icedid_satacom_vidar

IMPHASH a136217cdd3247ff6a8766561064ca0b
SHA256 340f9fc76cd02752f0dd1e7c554fe7d7dbd3eef09e526c02460a89918c85dc3e
MD5 436b31496f39341c6116d4ab2568665c
SHA1 5fceea24b62e09575c00cb637185d9c6b1f224f1
SHA512 2c50884bd73d397a5099e2a717180ad6dca6c0b75c3e5ad1f21276c7ad353ce7c3b6d1603d34deb1dfdae099e4415e9753ff8f81cee17c914134472f8fbad283
SSDEEP 6144:xaMjvuUwZpxUhLS+Lj9qQ3mNH6H3MQuWyhmMIQ54ofy0IkY+ZjOPT:xtVwZpKhWi4QP2V15Ml5P
TLSH
T1EDE49CC9A4C9D6DDCB9073B580DDBF56B5EC202A71AD81091D62BEC63BF9B2028D135C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

unityplayer

UnityMain2

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_436b31496f39341c6116d4ab2568665c_cobalt-strike_icedid_satacom_vidar

unityplayer

kernel32

generic