2026-06-28_d8d9ed0f3b4f4b5fd6dede4bafc48066_amadey_cobalt-strike_icedid_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-28_d8d9ed0f3b4f4b5fd6dede4bafc48066_amadey_cobalt-strike_icedid_satacom
Size 435KB
Sample260628-xcdrtact4q
SHA256 3572d278b14302b59629790a5127328d12a854506b00bcc7ca04134adf08ff5b
MD5 d8d9ed0f3b4f4b5fd6dede4bafc48066
SHA1 d071d339d193c29a45713965322aab094330b970
SHA512 26a620a5d7126d77f1f21cc3d1fb721d690f2a5a3c3770b2ff21862f5a9385175ce4b51306d86d16e95918270575fee2a31a92cdf84e082b3d040cea7f08c653
SSDEEP 6144:feJBzs0ytZ/R8p11J7umZOUIDx9Vq9QdDzyI5v0fdv7Rlr/eAkmyaVX:fX0d1j6mUUIQMDPv0Z7RlK9CVX
TLSH
T1DD945D56F3A940F9E0A7C138C6529703FB7678560334EADF16A4DA2A2F136E45D38B31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-28_d8d9ed0f3b4f4b5fd6dede4bafc48066_amadey_cobalt-strike_icedid_satacom

File Explorer

2026-06-28_d8d9ed0f3b4f4b5fd6dede4bafc48066_amadey_cobalt-strike_icedid_satacom

.exe 435KB

2026-06-28_d8d9ed0f3b4f4b5fd6dede4bafc48066_amadey_cobalt-strike_icedid_satacom

IMPHASH 7f56963841dade5a999e0a378d1f427b
SHA256 3572d278b14302b59629790a5127328d12a854506b00bcc7ca04134adf08ff5b
MD5 d8d9ed0f3b4f4b5fd6dede4bafc48066
SHA1 d071d339d193c29a45713965322aab094330b970
SHA512 26a620a5d7126d77f1f21cc3d1fb721d690f2a5a3c3770b2ff21862f5a9385175ce4b51306d86d16e95918270575fee2a31a92cdf84e082b3d040cea7f08c653
SSDEEP 6144:feJBzs0ytZ/R8p11J7umZOUIDx9Vq9QdDzyI5v0fdv7Rlr/eAkmyaVX:fX0d1j6mUUIQMDPv0Z7RlK9CVX
TLSH
T1DD945D56F3A940F9E0A7C138C6529703FB7678560334EADF16A4DA2A2F136E45D38B31
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

265600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

oleaut32

VariantClear SysFreeString SysAllocString SysStringLen SysAllocStringLen

ole32

CoTaskMemFree CoCreateInstance CoUninitialize CoInitialize OleInitialize

user32

CheckDlgButton DestroyIcon GetFocus EndDialog SetDlgItemTextW GetKeyState EnableWindow PostMessageW SetFocus InvalidateRect SetWindowTextW MessageBoxW DialogBoxParamW SystemParametersInfoW GetMonitorInfoA MonitorFromWindow IsDlgButtonChecked GetDlgItem GetWindowLongPtrW SetWindowLongPtrW ShowWindow MoveWindow ScreenToClient GetWindowRect GetParent GetWindowTextW GetWindowTextLengthW SendMessageW LoadStringW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CharUpperW SetCursor LoadCursorW LoadIconW KillTimer SetTimer MapDialogRect

shell32

SHBrowseForFolderW SHGetFileInfoW SHGetPathFromIDListW

kernel32

WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize GetStringTypeW SetStdHandle GetFileType GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW LCMapStringW VirtualProtect UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapAlloc HeapFree HeapReAlloc TerminateProcess ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread InitializeCriticalSectionEx EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter CreateSemaphoreW ResetEvent SetEvent CreateEventW GetCommandLineW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MultiByteToWideChar GetLastError WideCharToMultiByte GlobalLock GlobalUnlock FreeLibrary LoadLibraryExW GetModuleFileNameW FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW DeleteFileW SetLastError GetCurrentDirectoryW GetTickCount GetCurrentThreadId GetCurrentProcessId GetFileInformationByHandle GetStdHandle FindClose FindFirstFileW FindNextFileW FindFirstStreamW FindNextStreamW GetFileAttributesW GetLogicalDriveStringsW GetFileSize SetFilePointer ReadFile WriteFile SetEndOfFile GlobalAlloc GlobalFree CompareFileTime GetProcAddress GetModuleHandleW GetCurrentProcess GetModuleHandleA GetProcessAffinityMask GetSystemInfo GlobalMemoryStatusEx GetSystemTimeAsFileTime DeleteCriticalSection EnterCriticalSection LeaveCriticalSection WaitForMultipleObjects Sleep SetPriorityClass VirtualFree VirtualAlloc IsProcessorFeaturePresent GetVersion ReleaseSemaphore InitializeCriticalSection WaitForSingleObject

Name

.text

Size

330KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

73KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-28_d8d9ed0f3b4f4b5fd6dede4bafc48066_amadey_cobalt-strike_icedid_satacom

oleaut32

ole32

user32

shell32

kernel32

generic