2026-09-16_d5d0d5f20809955e239c7a390e4fe0c0_cobalt-strike_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-16_d5d0d5f20809955e239c7a390e4fe0c0_cobalt-strike_satacom_vidar
Size 62KB
Sample260916-t5r85adm31
SHA256 1a647a92fdad3e9086c0110417eb82994129676f433dc36b23cc1f0120626a76
MD5 d5d0d5f20809955e239c7a390e4fe0c0
SHA1 86e88ceecb6753a3a865a3a998847d3df3238783
SHA512 ba9e7179e33dd810a54663cd62a14a9dc56ecd871b1986b0214c71440f230b439d12d06c438748d0bc9beb8b649fee8063678e45a1c5fb52433761a0b1e1c4e0
SSDEEP 768:TghAYkO3iqTEm6DMywlQ9IwjtO35KCM+1Nh/ity4cTsiJ923OsqUD6Q4KIbjC3w:0qHYAm6DMy+6pxk7e33JL43jC3
TLSH
T1F9538E42A3E800E8D563C238CAB6AE23F97075164721A7DF0675C6651F337D4AE3E71A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-16_d5d0d5f20809955e239c7a390e4fe0c0_cobalt-strike_satacom_vidar

File Explorer

2026-09-16_d5d0d5f20809955e239c7a390e4fe0c0_cobalt-strike_satacom_vidar

.exe 62KB

2026-09-16_d5d0d5f20809955e239c7a390e4fe0c0_cobalt-strike_satacom_vidar

IMPHASH 7e6cf3ff4576581271ac8a313b2aab46
SHA256 1a647a92fdad3e9086c0110417eb82994129676f433dc36b23cc1f0120626a76
MD5 d5d0d5f20809955e239c7a390e4fe0c0
SHA1 86e88ceecb6753a3a865a3a998847d3df3238783
SHA512 ba9e7179e33dd810a54663cd62a14a9dc56ecd871b1986b0214c71440f230b439d12d06c438748d0bc9beb8b649fee8063678e45a1c5fb52433761a0b1e1c4e0
SSDEEP 768:TghAYkO3iqTEm6DMywlQ9IwjtO35KCM+1Nh/ity4cTsiJ923OsqUD6Q4KIbjC3w:0qHYAm6DMy+6pxk7e33JL43jC3
TLSH
T1F9538E42A3E800E8D563C238CAB6AE23F97075164721A7DF0675C6651F337D4AE3E71A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Micro\Desktop\Backstab-master\Backstab-master\x64\Release\Backstab.pdb

kernel32

LocalAlloc GetProcessInformation HeapFree GetProcessId CreateToolhelp32Snapshot Process32NextW Process32FirstW HeapAlloc GetProcessHeap GetExitCodeProcess GetCurrentDirectoryW CreateFileA SizeofResource WriteFile CreateFileW FreeResource LockResource DeleteFileW LoadResource FindResourceW RtlLookupFunctionEntry GetModuleHandleA OpenProcess CloseHandle GetCurrentProcess GetProcAddress GetLastError MultiByteToWideChar DeviceIoControl RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetModuleHandleW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter RtlCaptureContext

advapi32

GetTokenInformation LookupPrivilegeValueW AdjustTokenPrivileges RegDeleteKeyExW RegCreateKeyExW RegSetValueExW OpenProcessToken

vcruntime140

__current_exception __C_specific_handler __current_exception_context memcpy memset

api-ms-win-crt-heap-l1-1-0

calloc _set_new_mode

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf _set_fmode __p__commode __acrt_iob_func __stdio_common_vsnwprintf_s __stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

wcscpy_s strncmp

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtol atoi

api-ms-win-crt-runtime-l1-1-0

_c_exit _initialize_onexit_table _cexit _crt_atexit terminate __p___argv _get_initial_narrow_environment __p___argc _exit exit _initterm_e _register_thread_local_exe_atexit_callback _initterm _initialize_narrow_environment _configure_narrow_argv _register_onexit_function _set_app_type _seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-16_d5d0d5f20809955e239c7a390e4fe0c0_cobalt-strike_satacom_vidar

kernel32

advapi32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic