2026-07-03_eac7312958f3cb2dca20f2b1989290a7_cobalt-strike_icedid_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-03_eac7312958f3cb2dca20f2b1989290a7_cobalt-strike_icedid_njrat_satacom_stealc
Size 1.1MB
Sample260703-lp71msbw4j
SHA256 12c194e1073b6a06bf398a0485bce841650a1eb7febbca214fbb38c656f4b607
MD5 eac7312958f3cb2dca20f2b1989290a7
SHA1 2b0f1af4cf0bbdcc744a5e76ae00c961e5390da9
SHA512 da8f3d266aaada0017f531d9bad189369de99800d0fe1bd4f3277733731c8ca4b55166958a1c768f04ba3e0639b83116d614620026f53c9e71e6cd0cf95a8600
SSDEEP 12288:q20DgQWKinAWzkC34GoOvS8XWZOPqaZ7ynGXE51v9A9VoWxihndobM1HWMu:qRij934LkPGZ9aUnGXE59gC4ihnd9
TLSH
T16945AE45B2E540F8E47FE074CA62691BEB71340807305AEF67E44A592F73BE05ABE712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-03_eac7312958f3cb2dca20f2b1989290a7_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-07-03_eac7312958f3cb2dca20f2b1989290a7_cobalt-strike_icedid_njrat_satacom_stealc

.exe 1.1MB

2026-07-03_eac7312958f3cb2dca20f2b1989290a7_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH a7fc0b54801e255e952e1cdc7409aa34
SHA256 12c194e1073b6a06bf398a0485bce841650a1eb7febbca214fbb38c656f4b607
MD5 eac7312958f3cb2dca20f2b1989290a7
SHA1 2b0f1af4cf0bbdcc744a5e76ae00c961e5390da9
SHA512 da8f3d266aaada0017f531d9bad189369de99800d0fe1bd4f3277733731c8ca4b55166958a1c768f04ba3e0639b83116d614620026f53c9e71e6cd0cf95a8600
SSDEEP 12288:q20DgQWKinAWzkC34GoOvS8XWZOPqaZ7ynGXE51v9A9VoWxihndobM1HWMu:qRij934LkPGZ9aUnGXE59gC4ihnd9
TLSH
T16945AE45B2E540F8E47FE074CA62691BEB71340807305AEF67E44A592F73BE05ABE712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

667328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\musta\Downloads\cg\cg\build\RobloxCrashHandler.pdb

d3d11

D3D11CreateDeviceAndSwapChain

ntdll

RtlPcToFileHeader RtlVirtualUnwind RtlCaptureContext RtlUnwindEx RtlLookupFunctionEntry VerSetConditionMask RtlUnwind

kernel32

GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter Sleep SetThreadPriority GetCurrentThread Process32First TerminateProcess OpenProcess CreateToolhelp32Snapshot Process32Next CloseHandle GetCurrentProcessId ReadProcessMemory GetStdHandle SetCurrentConsoleFontEx GetCurrentConsoleFontEx ExitProcess SetConsoleCP SetConsoleOutputCP Module32Next GetProcessId Module32First GetConsoleWindow GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW LoadLibraryExW VirtualProtect GetModuleHandleA HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx UnhandledExceptionFilter IsDebuggerPresent GetCommandLineW GetCommandLineA WriteFile GetModuleFileNameW GetCurrentProcess IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread ReadFile FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException InitializeSListHead GetSystemTimeAsFileTime GetStartupInfoW SetUnhandledExceptionFilter GetCPInfo GetStringTypeW WakeAllConditionVariable GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree LCMapStringEx DecodePointer CreateFileW SetStdHandle GlobalAlloc MultiByteToWideChar HeapSize SetEndOfFile WriteConsoleW HeapFree GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW HeapReAlloc GetOEMCP GetACP IsValidCodePage ReleaseSRWLockExclusive AcquireSRWLockExclusive EncodePointer GetCurrentThreadId SleepConditionVariableSRW LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetLastError GetModuleHandleW GetFileInformationByHandleEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetFileSizeEx

user32

MonitorFromPoint DispatchMessageA GetWindowRect DestroyWindow GetSystemMetrics ShowWindow IsWindow SetWindowLongA IsChild MessageBoxA DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage PeekMessageA UnregisterClassA PostQuitMessage RegisterClassExA UpdateWindow GetAsyncKeyState FindWindowA SendInput GetKeyState GetMessageExtraInfo LoadCursorA GetDC ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos ReleaseDC GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData

gdi32

GetDeviceCaps

shell32

ShellExecuteW ShellExecuteA

ole32

CoInitializeEx CoCreateInstance

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

Name

.text

Size

847KB

Virtual Size

847KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

232KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

43KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-03_eac7312958f3cb2dca20f2b1989290a7_cobalt-strike_icedid_njrat_satacom_stealc

d3d11

ntdll

kernel32

user32

gdi32

shell32

ole32

imm32

d3dcompiler_47

dwmapi

generic