2026-09-30_789127c3b6f7b70b86a5050417921a71_cobalt-strike_icedid_satacom_vidar

General

Target
2026-09-30_789127c3b6f7b70b86a5050417921a71_cobalt-strike_icedid_satacom_vidar
Size 4.3MB
Sample261001-nzkzza1dkh
SHA256 fc181b56d5f7fab8de0a0311df223df5f2e8fd79cfb091c704a4428ad5d1e052
MD5 789127c3b6f7b70b86a5050417921a71
SHA1 0d6f9fc5bd99e939711826c4e879125e36721810
SHA512 ed72a2770105ea09c4e4036b0ca880c3fde1716b81c99770f557a3fa434a011a46cc73fe777cd9c33a4f1348ccab6c138ede17de30a014fbc2b766b06172c6fa
SSDEEP 98304:VjL8dYHDVYsqSTW6gIXiyGzyRYVBN329otfuRrEMkFfCf0anIyGbuaInGqNCHo:Vjgqes1TrllOy+VL29+AmFafVmufnZCI
TLSH
T1E626338BA3DA72E1FB326538980249C2C761B13E53859E9ECEDC44218FE7705CE56367
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_789127c3b6f7b70b86a5050417921a71_cobalt-strike_icedid_satacom_vidar

File Explorer

2026-09-30_789127c3b6f7b70b86a5050417921a71_cobalt-strike_icedid_satacom_vidar

.exe 4.3MB

2026-09-30_789127c3b6f7b70b86a5050417921a71_cobalt-strike_icedid_satacom_vidar

IMPHASH 61381104161b4cd41d607210e3d0ed70
SHA256 fc181b56d5f7fab8de0a0311df223df5f2e8fd79cfb091c704a4428ad5d1e052
MD5 789127c3b6f7b70b86a5050417921a71
SHA1 0d6f9fc5bd99e939711826c4e879125e36721810
SHA512 ed72a2770105ea09c4e4036b0ca880c3fde1716b81c99770f557a3fa434a011a46cc73fe777cd9c33a4f1348ccab6c138ede17de30a014fbc2b766b06172c6fa
SSDEEP 98304:VjL8dYHDVYsqSTW6gIXiyGzyRYVBN329otfuRrEMkFfCf0anIyGbuaInGqNCHo:Vjgqes1TrllOy+VL29+AmFafVmufnZCI
TLSH
T1E626338BA3DA72E1FB326538980249C2C761B13E53859E9ECEDC44218FE7705CE56367
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadFile GetModuleFileNameA VirtualFree WriteFile VirtualAlloc GetTempPathA CreateFileA CloseHandle SetFilePointerEx GetFileSize CreateProcessA WriteConsoleW CreateFileW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode

user32

MessageBoxA wsprintfA

Name

.text

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_789127c3b6f7b70b86a5050417921a71_cobalt-strike_icedid_satacom_vidar

kernel32

user32

generic