Extracted

Extracted

Extracted

• • Target
    2026-08-11_9386d08f36e6e3199e13970f0527e8aa_cobalt-strike_icedid_satacom_vidar
  • Size 16.2MB
  • SHA256 0b260900b5779bae269c97c0d73a05e32310772798e96aca9585f122d8fcd327
  • MD5 9386d08f36e6e3199e13970f0527e8aa
  • SHA1 d5c2bb990148e7cb528beb1b9de8498727f5098d
  • SHA512 dfe01fcacb3da87629388004b3e466567e17488a9ea9b511fd220350caa50a57fd11998ba54e32f9ed88d670274ba5f7bc80fffbf1773b3b58e64b470109ef9d
  • SSDEEP 393216:mNCfPs++vrNYn/1hcyc4qqvKiV6JnI2taSYyn:mNCfPv+xqtdNqqvKRI2cvy
  • TLSH
    T1E307339AEAF279FDC41E22B5378BC641731B7ED79741EF96A1521200CF4B9D18C2A80D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  rundiscoverydownloaderexecutionsolaris_loaderstealcsvcstealerinstallerloaderpersistencespywarestealer

  • Family: SolarisLoader

    SolarisLoader is a Windows loader written in C.

    loadersolaris_loader

  • Family: Stealc

    Stealc is an infostealer written in C++.

    stealerstealc

  • Family: SvcStealer, Diamotrix

    SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

    stealerdownloadersvcstealer

  • Detects Reflective DLL injection artifacts

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of local email clients

    Email clients store some user data on disk where infostealers will often target it.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses cryptocurrency files/wallets, possible credential harvesting

    spyware

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2