General
- Target 2026-08-26_fbf7594841f6b44838a0b417fe026597_cobalt-strike_icedid_satacom_stealc_vidar
- Size 2.6MB
- Sample260827-azftcswvew
- SHA256 208cbfe2a793ca38442ec65513bdf825b897303e8d3d8717685d5f7fafc9ec12
- MD5 fbf7594841f6b44838a0b417fe026597
- SHA1 be77e931e632768aa2b7e7af132752b1e8e689f3
- SHA512 1f0a9c34fbb7dc96c72a83d6c2f0f1640119e52f96566896ecd3bf0167089e85a3988fc053fce70bb54ed7bf7d2cc1fc947985ed8ff4dd100287fd2263e3fc25
- SSDEEP 49152:QC1wEtmV6zn/0xrbGaWHtFlZA8PnT95zTCi6/PqxrN0fpQl:Q4VnkNktF08/x5zWi8qLzl
- TLSH T19AC518A322D0F5EEC21ED8FDC546B86FA7C3BC7A16167297852AF25DAA33C447504B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_fbf7594841f6b44838a0b417fe026597_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_fbf7594841f6b44838a0b417fe026597_cobalt-strike_icedid_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_fbf7594841f6b44838a0b417fe026597_cobalt-strike_icedid_satacom_stealc_vidar
- Size 2.6MB
- SHA256 208cbfe2a793ca38442ec65513bdf825b897303e8d3d8717685d5f7fafc9ec12
- MD5 fbf7594841f6b44838a0b417fe026597
- SHA1 be77e931e632768aa2b7e7af132752b1e8e689f3
- SHA512 1f0a9c34fbb7dc96c72a83d6c2f0f1640119e52f96566896ecd3bf0167089e85a3988fc053fce70bb54ed7bf7d2cc1fc947985ed8ff4dd100287fd2263e3fc25
- SSDEEP 49152:QC1wEtmV6zn/0xrbGaWHtFlZA8PnT95zTCi6/PqxrN0fpQl:Q4VnkNktF08/x5zWi8qLzl
- TLSH T19AC518A322D0F5EEC21ED8FDC546B86FA7C3BC7A16167297852AF25DAA33C447504B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects Stealc stealer Version 3
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled