Analysis
- max time kernel
148s - max time network
115s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 15:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe
- Size 100KB
- Sample260820-s85syszgrg
- SHA256 4fb1aef4c32c9d2e694798fc695b2d81b9ec8a2978c932a4f6f75690e5252ea8
- MD5 2c337b02206e1ef8b721f0d7c303761e
- SHA1 c75a611aeb21b5bda1421093daa65141116dc863
- SHA512 a804d26b98de7847a25fa2b90fd937996dbc83b0df8366d3319273187fb8d0ed9d4737914d7b5a135970d8cc885d470411e5e12fdb095f05c3f8d568652a0ba5
- SSDEEP 1536:cOUIcNQDgbcKBiNSS0naCjXFq2SfbJ64MIIupJj4tzeJHQsWf3Nd09dlxzr:DUDogbKNIVF56gpIIupIee3nMvzr
- TLSH T163A36A9B73A530E8E6768238C8650A05EB77B8311621DF6F03A446861F273D19D3EFA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Drops file in Program Files directory 34 IoCs
description ioc Process File created C:\Program Files (x86)\Windows Media Player\setup_wm.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Mail\wab.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmlaunch.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmprph.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmpshare.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Media Player\wmplayer.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Internet Explorer\ieinstal.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Internet Explorer\ielowutil.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Defender Advanced Threat Protection\SenseImdsCollector.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\ink\pipanel.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Internet Explorer\ielowutil.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Mail\wabmig.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Media Player\wmpconfig.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Mail\wabmig.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmpconfig.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmpnscfg.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\setup_wm.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\7-Zip\7zFM.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Internet Explorer\ExtExport.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Defender Advanced Threat Protection\Classification\SenseCE.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Defender Advanced Threat Protection\SenseGPParser.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmpnetwk.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\7-Zip\7zG.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\Windows Media Player\wmplayer.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Common Files\Microsoft Shared\MSInfo\msinfo32.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Internet Explorer\ExtExport.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Mail\wab.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Media Player\wmprph.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\7-Zip\7z.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Media Player\wmlaunch.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Windows Media Player\wmpshare.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files\7-Zip\Uninstall.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe File created C:\Program Files (x86)\Internet Explorer\ieinstal.exe.tmp~ 2026-08-20_2c337b02206e1ef8b721f0d7c303761e_cobalt-strike_icedid_satacom_vidar.exe