2026-10-19_7e12d626605637233bb6960b8bdc84d9_cobalt-strike_fabookie_hijackloader_icedid_satacom_stealc_vidar

General

Target
2026-10-19_7e12d626605637233bb6960b8bdc84d9_cobalt-strike_fabookie_hijackloader_icedid_satacom_stealc_vidar
Size 2.0MB
Sample261020-sqavvsfs9j
SHA256 34ec2932b1fc80a757964e68ef1ce99551a09e2541e57bfe5953f0bf6aca07ea
MD5 7e12d626605637233bb6960b8bdc84d9
SHA1 4006fd62dd3651ec493848e131df87ce353c641a
SHA512 45a5b391a77c525a99f671f313e61b59be8beaff07caf767e4b49b97e8d7d2d2d4480b85e0e74582a50c0afff715f9a2f743960def7cb08f7dbe4d10aebc6c14
SSDEEP 24576:/1flT/pT9+wRf1IPWxD0wlOjwGQ9kFg1Dq7j+bR7bD+qBW:/nThgyIAOjDseQR7/+d
TLSH
T1BB951861B7F804E5E1B3A6789AB78566E632FC550B31D6CF22544B0A2F33AD0ED35321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_7e12d626605637233bb6960b8bdc84d9_cobalt-strike_fabookie_hijackloader_icedid_satacom_stealc_vidar

File Explorer

2026-10-19_7e12d626605637233bb6960b8bdc84d9_cobalt-strike_fabookie_hijackloader_icedid_satacom_stealc_vidar

.exe 2.0MB

2026-10-19_7e12d626605637233bb6960b8bdc84d9_cobalt-strike_fabookie_hijackloader_icedid_satacom_stealc_vidar

SHA256 34ec2932b1fc80a757964e68ef1ce99551a09e2541e57bfe5953f0bf6aca07ea
MD5 7e12d626605637233bb6960b8bdc84d9
SHA1 4006fd62dd3651ec493848e131df87ce353c641a
SHA512 45a5b391a77c525a99f671f313e61b59be8beaff07caf767e4b49b97e8d7d2d2d4480b85e0e74582a50c0afff715f9a2f743960def7cb08f7dbe4d10aebc6c14
SSDEEP 24576:/1flT/pT9+wRf1IPWxD0wlOjwGQ9kFg1Dq7j+bR7bD+qBW:/nThgyIAOjDseQR7/+d
TLSH
T1BB951861B7F804E5E1B3A6789AB78566E632FC550B31D6CF22544B0A2F33AD0ED35321
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

117416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

120KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

700B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_7e12d626605637233bb6960b8bdc84d9_cobalt-strike_fabookie_hijackloader_icedid_satacom_stealc_vidar

generic