2026-08-16_62d9ed9fab1f4bb0f78c495b320ffaa6_cobalt-strike_icedid_satacom_vidar

General

Target
2026-08-16_62d9ed9fab1f4bb0f78c495b320ffaa6_cobalt-strike_icedid_satacom_vidar
Size 1000KB
Sample260816-e22wtszzbx
SHA256 0015b687b46c8ae27eed8a4fe802a1691437126d57a9df94acfe73d976fdefac
MD5 62d9ed9fab1f4bb0f78c495b320ffaa6
SHA1 7a927ba999ad67058f3208fb6a3b8a612bb9c031
SHA512 4d91b4f7537638fd534d373823a6b9f6f53d4381d87b96df3e467d62fc0647ab19ae26ba83bd7e8974394561b420ed5b3527c9db7e436bb0b9e7fd890e3544b7
SSDEEP 12288:/tVwZpGhZQYoZrjJ1QhxCpJLoCNTCXU0O0vzmEl://TFoX1YxCpJMCl/0Fzz
TLSH
T16B257B16DB85D8A5D2DCB538DF62CAF29321AC4DD2A0869F16F0BD433DFE6935D29200
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_62d9ed9fab1f4bb0f78c495b320ffaa6_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-08-16_62d9ed9fab1f4bb0f78c495b320ffaa6_cobalt-strike_icedid_satacom_vidar

.exe 1000KB

2026-08-16_62d9ed9fab1f4bb0f78c495b320ffaa6_cobalt-strike_icedid_satacom_vidar

IMPHASH a136217cdd3247ff6a8766561064ca0b
SHA256 0015b687b46c8ae27eed8a4fe802a1691437126d57a9df94acfe73d976fdefac
MD5 62d9ed9fab1f4bb0f78c495b320ffaa6
SHA1 7a927ba999ad67058f3208fb6a3b8a612bb9c031
SHA512 4d91b4f7537638fd534d373823a6b9f6f53d4381d87b96df3e467d62fc0647ab19ae26ba83bd7e8974394561b420ed5b3527c9db7e436bb0b9e7fd890e3544b7
SSDEEP 12288:/tVwZpGhZQYoZrjJ1QhxCpJLoCNTCXU0O0vzmEl://TFoX1YxCpJMCl/0Fzz
TLSH
T16B257B16DB85D8A5D2DCB538DF62CAF29321AC4DD2A0869F16F0BD433DFE6935D29200
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

983040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

unityplayer

UnityMain2

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

552KB

Virtual Size

551KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rcdf17

Size

336KB

Virtual Size

384KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_62d9ed9fab1f4bb0f78c495b320ffaa6_cobalt-strike_icedid_satacom_vidar

unityplayer

kernel32

generic