2026-09-25_862a4ea75092e26f3f77ff8af15d46d8_cobalt-strike_icedid_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-25_862a4ea75092e26f3f77ff8af15d46d8_cobalt-strike_icedid_satacom_vidar
Size 223KB
Sample260925-3gr3ws1zcx
SHA256 bcb9f66e928c6cb3b23277e24dbd5c3ab398338c20a98477f7c2f634e88f311e
MD5 862a4ea75092e26f3f77ff8af15d46d8
SHA1 84ede58d3f352fa5541db4370964c7ff977aedfd
SHA512 0828b64f749ecdd0652229a7b285c58703c3a53a13afe74c4a89ffbd2b3a14b3b956c8ba1f432fa1333ec2437029023dfd663b39c35c9cfd2b8c6dd517295898
SSDEEP 3072:a0qGqfPxhbjJhnBWICbCoxiK4fgGHzIFIH6PjRE9PY8A0S4nK:dqfPxFjDBWIxtf/edPjRE9PY8thn
TLSH
T10924C32B639030D5D2EE4DF8C81A46FD5F35B831C6D04B0E02B4AA7D1EA2DDD6D16A93
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-25_862a4ea75092e26f3f77ff8af15d46d8_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-09-25_862a4ea75092e26f3f77ff8af15d46d8_cobalt-strike_icedid_satacom_vidar

.exe 223KB

2026-09-25_862a4ea75092e26f3f77ff8af15d46d8_cobalt-strike_icedid_satacom_vidar

IMPHASH fcdb10c978ecb7f9acf9d5fe539f2b08
SHA256 bcb9f66e928c6cb3b23277e24dbd5c3ab398338c20a98477f7c2f634e88f311e
MD5 862a4ea75092e26f3f77ff8af15d46d8
SHA1 84ede58d3f352fa5541db4370964c7ff977aedfd
SHA512 0828b64f749ecdd0652229a7b285c58703c3a53a13afe74c4a89ffbd2b3a14b3b956c8ba1f432fa1333ec2437029023dfd663b39c35c9cfd2b8c6dd517295898
SSDEEP 3072:a0qGqfPxhbjJhnBWICbCoxiK4fgGHzIFIH6PjRE9PY8A0S4nK:dqfPxFjDBWIxtf/edPjRE9PY8thn
TLSH
T10924C32B639030D5D2EE4DF8C81A46FD5F35B831C6D04B0E02B4AA7D1EA2DDD6D16A93
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7460

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\WorkLocal\Usr95_TkcProj\TouchMousePointerV3\x64\Release\TouchMousePointerTray.pdb

kernel32

lstrcpyW GetTickCount WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetModuleFileNameW HeapSize GetProcessHeap LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapReAlloc lstrlenW GetStringTypeW GetFileType RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle

user32

EndPaint GetMessageW DefWindowProcW PostMessageW DestroyWindow GetDC IsWindowVisible CreateWindowExW RegisterClassExW DispatchMessageW SetTimer TranslateMessage LoadIconW FindWindowW LoadCursorW KillTimer PostQuitMessage RegisterWindowMessageW LoadImageW ReleaseDC GetCursorPos BeginPaint

gdi32

GetDeviceCaps

shell32

ShellExecuteExW Shell_NotifyIconW

ole32

OleInitialize

Name

.text

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-25_862a4ea75092e26f3f77ff8af15d46d8_cobalt-strike_icedid_satacom_vidar

kernel32

user32

gdi32

shell32

ole32

generic