General
- Target 2026-08-18_5bd86b918875dea3d95154ca64e07b8e_cobalt-strike_icedid_vidar
- Size 513KB
- Sample260818-hm96fafh98
- SHA256 24336e6bba8e143376463f9d2f05f0d3f81d521da9f1e45c4ee86a3bcb535fc4
- MD5 5bd86b918875dea3d95154ca64e07b8e
- SHA1 d4f72d8134daff3331fe1a752e0567191778ac34
- SHA512 1884708e0b03753faa29a2c708cabb50a9f11f3329cd28f6be7919160004de1dacd1892a468a036b741342c74c717ef2bc01523e6f62a4a981695749f3ae66f4
- SSDEEP 12288:ixCnn4S/f0/4zmxFN1m2jfsSpNTdMvDN:ZnT/f0wCe4Uid
- TLSH T1C2B4F117B7E5407BE1BB867484734B499B73B4411B21DBAF0698429E1F737C08E3AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-18_5bd86b918875dea3d95154ca64e07b8e_cobalt-strike_icedid_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_5bd86b918875dea3d95154ca64e07b8e_cobalt-strike_icedid_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_5bd86b918875dea3d95154ca64e07b8e_cobalt-strike_icedid_vidar
- Size 513KB
- SHA256 24336e6bba8e143376463f9d2f05f0d3f81d521da9f1e45c4ee86a3bcb535fc4
- MD5 5bd86b918875dea3d95154ca64e07b8e
- SHA1 d4f72d8134daff3331fe1a752e0567191778ac34
- SHA512 1884708e0b03753faa29a2c708cabb50a9f11f3329cd28f6be7919160004de1dacd1892a468a036b741342c74c717ef2bc01523e6f62a4a981695749f3ae66f4
- SSDEEP 12288:ixCnn4S/f0/4zmxFN1m2jfsSpNTdMvDN:ZnT/f0wCe4Uid
- TLSH T1C2B4F117B7E5407BE1BB867484734B499B73B4411B21DBAF0698429E1F737C08E3AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows exceutables bypassing UAC using CMSTP utility, command line and INF
-
Detects command variations typically used by ransomware