2026-07-06_10919835d1c1668de9c67741e1ab533c_cobalt-strike_icedid_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_10919835d1c1668de9c67741e1ab533c_cobalt-strike_icedid_satacom
Size 1.1MB
Sample260706-jypvbafx4j
SHA256 a6b6aff3783452b3e028f28bda26238b3ff3953e0d0a1a7def791d5c569393ba
MD5 10919835d1c1668de9c67741e1ab533c
SHA1 61ab4ee7334ecf6cd104a40af2089c0ab2c11cc7
SHA512 7b137d85eae6e05d7786e50e90a20ab3c60d9f4e8d9195fc024daf85e14a12e128144377b67c4bb4180dd6894b9103da951af13b48f8c7659e4839fc375dc95a
SSDEEP 24576:bmxdLT6mFnZoNlaAhgoxovnqXK3qs4cpkX/XZ/0pa5sMKe:bmZCRWJvqXWqs41XZ/0Vq
TLSH
T1ED4523977AE538F4E2A7C23E44C84A55DB71BCB10B1A17EF83B5225A1F132E05E39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_10919835d1c1668de9c67741e1ab533c_cobalt-strike_icedid_satacom

File Explorer

2026-07-06_10919835d1c1668de9c67741e1ab533c_cobalt-strike_icedid_satacom

.exe 1.1MB

2026-07-06_10919835d1c1668de9c67741e1ab533c_cobalt-strike_icedid_satacom

IMPHASH c23d2c677fdd046790db05e09812dc1d
SHA256 a6b6aff3783452b3e028f28bda26238b3ff3953e0d0a1a7def791d5c569393ba
MD5 10919835d1c1668de9c67741e1ab533c
SHA1 61ab4ee7334ecf6cd104a40af2089c0ab2c11cc7
SHA512 7b137d85eae6e05d7786e50e90a20ab3c60d9f4e8d9195fc024daf85e14a12e128144377b67c4bb4180dd6894b9103da951af13b48f8c7659e4839fc375dc95a
SSDEEP 24576:bmxdLT6mFnZoNlaAhgoxovnqXK3qs4cpkX/XZ/0pa5sMKe:bmZCRWJvqXWqs41XZ/0Vq
TLSH
T1ED4523977AE538F4E2A7C23E44C84A55DB71BCB10B1A17EF83B5225A1F132E05E39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7904

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentProcessId CreateThread GetCurrentThreadId FlushInstructionCache GlobalMemoryStatusEx GetSystemInfo GetTickCount GetModuleHandleA GetProcAddress GetStartupInfoA WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetCurrentProcess FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap LCMapStringW LoadLibraryExW VirtualProtect Sleep WaitForSingleObject QueryPerformanceFrequency QueryPerformanceCounter SetLastError GetLastError CloseHandle OutputDebugStringA IsDebuggerPresent GetConsoleOutputCP GetCommandLineA GetStringTypeW GetFileType SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCPInfo GetOEMCP GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP

user32

GetMessageA TranslateMessage DispatchMessageA DefWindowProcA PostQuitMessage RegisterClassA CreateWindowExA DestroyWindow ShowWindow MoveWindow LoadIconA LoadCursorA GetDesktopWindow MessageBoxA GetWindowRect GetWindowTextA SetWindowTextA ReleaseDC GetDC UpdateWindow GetSystemMetrics EnableWindow IsWindowVisible

gdi32

TextOutA SetMapMode SelectObject Rectangle GetDeviceCaps DeleteObject CreateSolidBrush CreateCompatibleDC CreateCompatibleBitmap BitBlt

ole32

CoTaskMemAlloc CoInitialize CLSIDFromProgID CoCreateInstance CoUninitialize CoTaskMemFree

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

Name

OOEfXz

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

bCoEju

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

VpVABO

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

YgPOEY

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

lFpbnp

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

LJvrvI

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PyAMYE

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_10919835d1c1668de9c67741e1ab533c_cobalt-strike_icedid_satacom

kernel32

user32

gdi32

ole32

version

generic