2026-07-05_a2de74833ede0cc2d900bbac5edb71b2_cobalt-strike_icedid_satacom

General

Target
2026-07-05_a2de74833ede0cc2d900bbac5edb71b2_cobalt-strike_icedid_satacom
Size 3.5MB
Sample260705-l6892abx4t
SHA256 51d9d41dbcc182ebe966473a3bdadcf69867833f484ed0f3d3a295e96923601a
MD5 a2de74833ede0cc2d900bbac5edb71b2
SHA1 7f5570fd52a3411d72a060edd2d96145ac10ef25
SHA512 6613dda993ea81cdaf7aa5a23fdbddfee9c070485bb91700428583d81dacecebf87aa3e4601114bdbf2700133a3868f292ca5231ca02a3dfdfb1c3fb1858cd06
SSDEEP 98304:2UQKM5SVJs8+sC79db9822J51Q0HyRg3+WP4zSPao3:2TR9zdG22xQ0Hyo9USPF
TLSH
T1E0063393B06A39FBE962C93C911543258B53B8309327A6CF0B5441B56FA61F2CE35FB1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_a2de74833ede0cc2d900bbac5edb71b2_cobalt-strike_icedid_satacom

File Explorer

2026-07-05_a2de74833ede0cc2d900bbac5edb71b2_cobalt-strike_icedid_satacom

.exe 3.5MB

2026-07-05_a2de74833ede0cc2d900bbac5edb71b2_cobalt-strike_icedid_satacom

IMPHASH 11e8e84dd7c528c1e37820ec8e54dbd2
SHA256 51d9d41dbcc182ebe966473a3bdadcf69867833f484ed0f3d3a295e96923601a
MD5 a2de74833ede0cc2d900bbac5edb71b2
SHA1 7f5570fd52a3411d72a060edd2d96145ac10ef25
SHA512 6613dda993ea81cdaf7aa5a23fdbddfee9c070485bb91700428583d81dacecebf87aa3e4601114bdbf2700133a3868f292ca5231ca02a3dfdfb1c3fb1858cd06
SSDEEP 98304:2UQKM5SVJs8+sC79db9822J51Q0HyRg3+WP4zSPao3:2TR9zdG22xQ0Hyo9USPF
TLSH
T1E0063393B06A39FBE962C93C911543258B53B8309327A6CF0B5441B56FA61F2CE35FB1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

HeapFree GetProcessHeap Sleep TerminateProcess ResumeThread CreateProcessW GetThreadContext SetThreadContext HeapAlloc VirtualAllocEx ReadProcessMemory WriteProcessMemory GetModuleFileNameW GetModuleHandleW GetProcAddress WriteConsoleW SetFilePointerEx CloseHandle SetFilePointer SetFileInformationByHandle ReadFile GetFileSize GetDriveTypeW GetSystemDirectoryW CreateFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetCurrentProcess ExitProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode

user32

GetSystemMetrics

advapi32

CryptCreateHash CryptDecrypt CryptSetKeyParam CryptDeriveKey CryptReleaseContext CryptAcquireContextW CryptHashData

Name

.text

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_a2de74833ede0cc2d900bbac5edb71b2_cobalt-strike_icedid_satacom

kernel32

user32

advapi32

generic