2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar
Size 10.3MB
Sample260808-a67wesztay
SHA256 ebc740732168c16535a8c6525d70d7700e3ce0d9257136c5582ef036878bbb9a
MD5 aad294e6bf8e9bf57dc65e005db9b18e
SHA1 ea8bffcd5f2b42609bf359ff2d0de83b8fa9c427
SHA512 0afd1dc5ac6613eb0a9127b05b11398b50577cf2e90d4fe0a8c9615c39047c6091e05e3ecad8005b60d4a7a0057c2956abdccff27fd9744717b89d9ae07780aa
SSDEEP 196608:2r8cwOHB1SkNJ1wQQjrwS8LjoO+uGFXrwS8LjoO+lVvCs98BIC7EiJpHQ2v/:2r8cwOHnbDGXwSm/fGxwSm/cxHjCAiw4
TLSH
T1E0B6336AF3A546F4E1679030A853161AE733785F0330F6DF2994D5266F63BA02D7E322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar

File Explorer

2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar

.exe 10.3MB

2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar

IMPHASH 6f96e758c32285a6d222d9670c050197
SHA256 ebc740732168c16535a8c6525d70d7700e3ce0d9257136c5582ef036878bbb9a
MD5 aad294e6bf8e9bf57dc65e005db9b18e
SHA1 ea8bffcd5f2b42609bf359ff2d0de83b8fa9c427
SHA512 0afd1dc5ac6613eb0a9127b05b11398b50577cf2e90d4fe0a8c9615c39047c6091e05e3ecad8005b60d4a7a0057c2956abdccff27fd9744717b89d9ae07780aa
SSDEEP 196608:2r8cwOHB1SkNJ1wQQjrwS8LjoO+uGFXrwS8LjoO+lVvCs98BIC7EiJpHQ2v/:2r8cwOHnbDGXwSm/fGxwSm/cxHjCAiw4
TLSH
T1E0B6336AF3A546F4E1679030A853161AE733785F0330F6DF2994D5266F63BA02D7E322
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

230212

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord410 ord411 ord413 ord412

oleaut32

SysAllocStringLen SysAllocString VariantClear SysFreeString SysStringLen

ole32

CoTaskMemFree CoCreateInstance CoUninitialize OleInitialize CoInitialize

user32

EmptyClipboard GetWindowTextW SendMessageW CharUpperW SetClipboardData CloseClipboard OpenClipboard LoadStringW GetParent GetSysColorBrush EnumChildWindows GetDlgCtrlID GetComboBoxInfo GetSystemMetrics GetWindowTextLengthW SetWindowPos IsWindowEnabled DrawTextW FrameRect InflateRect PtInRect IntersectRect GetCursorPos RedrawWindow DefWindowProcW EndPaint BeginPaint DrawFocusRect ReleaseDC GetWindowDC MapWindowPoints GetClientRect FillRect OffsetRect GetClassNameW GetSysColor GetAncestor SetPropW SetCursor LoadCursorW LoadIconW KillTimer TrackMouseEvent SetTimer IsDlgButtonChecked CheckDlgButton DestroyIcon GetFocus EndDialog SetDlgItemTextW GetKeyState EnableWindow PostMessageW SetFocus InvalidateRect SetWindowTextW MessageBoxW DialogBoxParamW SystemParametersInfoW GetMonitorInfoA MonitorFromWindow MapDialogRect GetDlgItem GetWindowLongPtrW SetWindowLongPtrW ShowWindow MoveWindow ScreenToClient GetWindowRect

advapi32

RegGetValueW

shell32

SHGetPathFromIDListW SHGetPathFromIDListEx SHBrowseForFolderW SHGetFileInfoW

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

uxtheme

EnableThemeDialogTexture SetWindowTheme BufferedPaintStopAllAnimations OpenThemeData DrawThemeBackground DrawThemeTextEx CloseThemeData GetThemeFont GetThemePartSize GetThemeBackgroundContentRect DrawThemeParentBackground EndBufferedAnimation GetThemeTransitionDuration BeginBufferedAnimation BufferedPaintRenderAnimation

gdi32

BitBlt RestoreDC SaveDC CreateCompatibleBitmap CreateCompatibleDC Polyline SetBkColor SetTextColor DeleteDC GetClipRgn CreateRectRgn SelectClipRgn ExcludeClipRect GetTextExtentPoint32W CreateFontIndirectW RoundRect GetStockObject SelectObject CreatePen DeleteObject CreateSolidBrush CreateRectRgnIndirect SetBkMode

kernel32

LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RaiseException RtlPcToFileHeader RtlUnwindEx TerminateProcess InitializeSListHead GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeCriticalSectionEx QueryPerformanceCounter TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetPrivateProfileIntW GetPrivateProfileStringW VirtualProtect lstrcmpiW CreateSemaphoreW ResetEvent SetEvent CreateEventW WaitForSingleObject InitializeCriticalSection ReleaseSemaphore GetModuleHandleW GetProcAddress GetVersion IsProcessorFeaturePresent VirtualAlloc VirtualFree SetPriorityClass Sleep WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetSystemTimeAsFileTime GlobalMemoryStatusEx GetFileType SetFilePointerEx FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapSize WriteConsoleW GetCommandLineW MultiByteToWideChar GetLastError WideCharToMultiByte GlobalLock GlobalUnlock FreeLibrary LoadLibraryExW GetModuleFileNameW FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW DeleteFileW SetLastError GetCurrentDirectoryW GetTickCount GetCurrentThreadId GetCurrentProcessId GetFileInformationByHandle GetStdHandle FindClose FindFirstFileW FindNextFileW FindFirstStreamW FindNextStreamW GetFileAttributesW GetLogicalDriveStringsW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GlobalAlloc GlobalFree CompareFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetCurrentProcess GetProcessAffinityMask GetSystemInfo

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_aad294e6bf8e9bf57dc65e005db9b18e_amadey_cobalt-strike_icedid_stealc_vidar

comctl32

oleaut32

ole32

user32

advapi32

shell32

dwmapi

uxtheme

gdi32

kernel32

generic