General
- Target 2026-08-24_0f6dc3ff244b18ce6dc6d53210cb9f85_cobalt-strike_icedid_satacom_stealc_vidar
- Size 314KB
- Sample260825-xsbmdsvtdv
- SHA256 54adc4ff32ba8f3dafb26d995bc17544c8b9f8dea7154e351b9359699a133c38
- MD5 0f6dc3ff244b18ce6dc6d53210cb9f85
- SHA1 981f1162dc0605a070a62cb02906492f6cd8313f
- SHA512 67456761c5d2f37f20d993fc9a06f14be932ed7a71e05e9c42ee0b523365e2bd168b8de6af37182cc0061776c0071ee384b4c330911812ace3a7416d54dd2fc5
- SSDEEP 6144:d0/b4kAn2bboeTbfOvlHgh5hWlHWlvaQ:d0/kkAn2bbFTb6AvsEE
- TLSH T119649E55B3A810F8E9B7D27CC9560A06E7B278150760E7CF13B0466A6F23BE0AD3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_0f6dc3ff244b18ce6dc6d53210cb9f85_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_0f6dc3ff244b18ce6dc6d53210cb9f85_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_0f6dc3ff244b18ce6dc6d53210cb9f85_cobalt-strike_icedid_satacom_stealc_vidar
- Size 314KB
- SHA256 54adc4ff32ba8f3dafb26d995bc17544c8b9f8dea7154e351b9359699a133c38
- MD5 0f6dc3ff244b18ce6dc6d53210cb9f85
- SHA1 981f1162dc0605a070a62cb02906492f6cd8313f
- SHA512 67456761c5d2f37f20d993fc9a06f14be932ed7a71e05e9c42ee0b523365e2bd168b8de6af37182cc0061776c0071ee384b4c330911812ace3a7416d54dd2fc5
- SSDEEP 6144:d0/b4kAn2bboeTbfOvlHgh5hWlHWlvaQ:d0/kkAn2bbFTb6AvsEE
- TLSH T119649E55B3A810F8E9B7D27CC9560A06E7B278150760E7CF13B0466A6F23BE0AD3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1