General
- Target 2026-08-15_bf1862481d4de3576c794f2dd8ecb676_cobalt-strike_icedid_satacom_vidar
- Size 1.8MB
- Sample260816-c7xsysbr6w
- SHA256 b3d51f449476fd58f6f9db50f7f5d543b01ee1af54a506e01b94eb820e0b65dd
- MD5 bf1862481d4de3576c794f2dd8ecb676
- SHA1 80d90ab0ffcfda8d0b83a4d1dacd67ca9aa430e4
- SHA512 6d6af7e9f7f93b0d96ab2f11d3505ca87e624677e9eb1742fdaff82ff70e45dd2533e25a035274c0ae79c74ebdd7347261edb7c6c3ab28a9063bff2cf4ee8b65
- SSDEEP 12288:ixDGMUHJwljyjwoTxcRQwhmPISQblAHadCC0+ziqgp+SRDDu4wKolH+:ixDMwlOjwGyzQPI9hAH8CzQgAqvuG
- TLSH T14C859C79E6B804D4E6BAB53886638555D222FC09535196CF3A686F063F37BD0FE7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_bf1862481d4de3576c794f2dd8ecb676_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_bf1862481d4de3576c794f2dd8ecb676_cobalt-strike_icedid_satacom_vidar
- Size 1.8MB
- SHA256 b3d51f449476fd58f6f9db50f7f5d543b01ee1af54a506e01b94eb820e0b65dd
- MD5 bf1862481d4de3576c794f2dd8ecb676
- SHA1 80d90ab0ffcfda8d0b83a4d1dacd67ca9aa430e4
- SHA512 6d6af7e9f7f93b0d96ab2f11d3505ca87e624677e9eb1742fdaff82ff70e45dd2533e25a035274c0ae79c74ebdd7347261edb7c6c3ab28a9063bff2cf4ee8b65
- SSDEEP 12288:ixDGMUHJwljyjwoTxcRQwhmPISQblAHadCC0+ziqgp+SRDDu4wKolH+:ixDMwlOjwGyzQPI9hAH8CzQgAqvuG
- TLSH T14C859C79E6B804D4E6BAB53886638555D222FC09535196CF3A686F063F37BD0FE7A300
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory