General
- Target 2026-08-15_3aa8afe1b409e27ce1fbd358d75ffd35_cobalt-strike_icedid_satacom_stealc_vidar
- Size 878KB
- Sample260815-er6f9sen71
- SHA256 e8a5a88bd203aa44252cf48202424c97fc0434da49d383b08cf5ccc674777d94
- MD5 3aa8afe1b409e27ce1fbd358d75ffd35
- SHA1 9f9778aa85a334b33474c4fe6bddbd711007a982
- SHA512 2289cbe894b5802cda48039660782d6865d681cb654964ff13a818d04fa9997068e47f5cb7593acaa556b4a6ace7bc60c5b4beab6a499d352cf0921477061630
- SSDEEP 24576:bgLbYcttrUy5Nq1/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:bgAcnUUyLNiXicJFFRGNzj3
- TLSH T1A215E05AB2A850F6E9BB913CC8468505F671B8154B61E7EF13A4076E3F337D0AE3A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_3aa8afe1b409e27ce1fbd358d75ffd35_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_3aa8afe1b409e27ce1fbd358d75ffd35_cobalt-strike_icedid_satacom_stealc_vidar
- Size 878KB
- SHA256 e8a5a88bd203aa44252cf48202424c97fc0434da49d383b08cf5ccc674777d94
- MD5 3aa8afe1b409e27ce1fbd358d75ffd35
- SHA1 9f9778aa85a334b33474c4fe6bddbd711007a982
- SHA512 2289cbe894b5802cda48039660782d6865d681cb654964ff13a818d04fa9997068e47f5cb7593acaa556b4a6ace7bc60c5b4beab6a499d352cf0921477061630
- SSDEEP 24576:bgLbYcttrUy5Nq1/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:bgAcnUUyLNiXicJFFRGNzj3
- TLSH T1A215E05AB2A850F6E9BB913CC8468505F671B8154B61E7EF13A4076E3F337D0AE3A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1