2026-06-01_c6d80553832ef7d2d31ee21fa64c22ec_cobalt-strike_icedid_njrat_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-01_c6d80553832ef7d2d31ee21fa64c22ec_cobalt-strike_icedid_njrat_satacom
Size 80.0MB
Sample260601-cddszsdx9q
SHA256 602f0197659b1a71cc38d1faab1c1250203a6d2a7226ae7fdd2c0d0bd6885cc6
MD5 c6d80553832ef7d2d31ee21fa64c22ec
SHA1 546bba9e58bc82eef5ba2a4edb4093d7750fab5c
SHA512 b9224b80cdcfe211d58d4814a7ecf101b3dc63cfa6f84ad46f3eff8b159cfc1fbabca41ea9a202ed036e2e65160fac10b57b9b7dbad524d1ee293371031cd195
SSDEEP 49152:Gb4Nq6cWMYi2wQ71v52grqwl3IzUDnjVf8kTLK2FslB:Gb4NRcWh71v52O4inBtLiB
TLSH
T12908E116A3E840F8D077D174CA568607DBB2F8461734D6DF53D08A9A2F23BB25A7E321
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-01_c6d80553832ef7d2d31ee21fa64c22ec_cobalt-strike_icedid_njrat_satacom

File Explorer

2026-06-01_c6d80553832ef7d2d31ee21fa64c22ec_cobalt-strike_icedid_njrat_satacom

.exe 80.0MB

2026-06-01_c6d80553832ef7d2d31ee21fa64c22ec_cobalt-strike_icedid_njrat_satacom

IMPHASH 0162339447290edbe33a5eeeb76ddbbf
SHA256 602f0197659b1a71cc38d1faab1c1250203a6d2a7226ae7fdd2c0d0bd6885cc6
MD5 c6d80553832ef7d2d31ee21fa64c22ec
SHA1 546bba9e58bc82eef5ba2a4edb4093d7750fab5c
SHA512 b9224b80cdcfe211d58d4814a7ecf101b3dc63cfa6f84ad46f3eff8b159cfc1fbabca41ea9a202ed036e2e65160fac10b57b9b7dbad524d1ee293371031cd195
SSDEEP 49152:Gb4Nq6cWMYi2wQ71v52grqwl3IzUDnjVf8kTLK2FslB:Gb4NRcWh71v52O4inBtLiB
TLSH
T12908E116A3E840F8D077D174CA568607DBB2F8461734D6DF53D08A9A2F23BB25A7E321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2025728

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

advapi32

GetUserNameA

user32

GetSystemMetrics GetDC ReleaseDC

gdi32

CreateCompatibleDC BitBlt SelectObject CreateCompatibleBitmap GetDIBits DeleteDC DeleteObject

winhttp

WinHttpCloseHandle WinHttpOpen WinHttpReceiveResponse WinHttpConnect WinHttpOpenRequest WinHttpReadData WinHttpSetOption WinHttpSendRequest

kernel32

GetACP ReadConsoleW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle WriteConsoleW IsValidCodePage DeleteCriticalSection GetConsoleMode GetConsoleOutputCP GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle GetTempPathW Sleep CloseHandle FreeConsole GetProcAddress WideCharToMultiByte WinExec SetConsoleOutputCP CreateDirectoryA GetComputerNameA ExpandEnvironmentStringsW WaitForSingleObject ReadFile SetFilePointer CreateFileW GetLastError CreateProcessW WriteFile CreateNamedPipeW PeekNamedPipe GetCurrentThreadId GetCurrentProcessId GetTickCount ConnectNamedPipe GetModuleHandleW AreFileApisANSI TryEnterCriticalSection HeapCreate HeapFree EnterCriticalSection GetFullPathNameW GetDiskFreeSpaceW OutputDebugStringA LockFile LeaveCriticalSection InitializeCriticalSection GetFullPathNameA SetEndOfFile UnlockFileEx CreateMutexW GetFileAttributesW UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar GetTempPathA FormatMessageW GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc RaiseException GetSystemInfo HeapAlloc HeapCompact HeapDestroy UnlockFile LocalFree LockFileEx GetFileSize RtlUnwind GetProcessHeap SystemTimeToFileTime GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter FlushFileBuffers GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW SetFileInformationByHandle CreateFile2 GetFileInformationByHandleEx LCMapStringEx InitializeCriticalSectionEx EncodePointer DecodePointer GetCPInfo GetStringTypeW InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW CompareStringW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree CreateThread ExitThread FreeLibrary FreeLibraryAndExitThread GetModuleHandleExW IsProcessorFeaturePresent GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetCommandLineA GetCommandLineW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetFileType VirtualProtect LoadLibraryExW

Name

.text

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-01_c6d80553832ef7d2d31ee21fa64c22ec_cobalt-strike_icedid_njrat_satacom

version

advapi32

user32

gdi32

winhttp

kernel32

generic