2026-07-06_17f2c648fc328969250c1b7809f899ff_amadey_cobalt-strike_icedid_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-06_17f2c648fc328969250c1b7809f899ff_amadey_cobalt-strike_icedid_satacom_stealc
Size 756KB
Sample260707-ftshvsft9n
SHA256 af3233602a0ada51ab34e035969cc622834d634b148e593b0a5d3e0821445a4c
MD5 17f2c648fc328969250c1b7809f899ff
SHA1 570fd8d71e137c3b5b53ec34313cbdc6bd90d0f1
SHA512 fe1947f8790e682b5453eef8c783fec635da2e7f0bfaca03dfe83d27202d326deffc49b21bcb5757a6ccfa86bd86705c668043fcd613556b380ed484814a7f20
SSDEEP 12288:Mq6i2u8akqslPoUChjGGwT53ichIcGxuENAm7eAF3/:MGj8akqslw/jWpichrMu+Z
TLSH
T1D6F49E3677F842F5E066D174C5539607FBB27C460274C99F13A18AAA2F236B0EE39721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_17f2c648fc328969250c1b7809f899ff_amadey_cobalt-strike_icedid_satacom_stealc

File Explorer

2026-07-06_17f2c648fc328969250c1b7809f899ff_amadey_cobalt-strike_icedid_satacom_stealc

.exe 756KB

2026-07-06_17f2c648fc328969250c1b7809f899ff_amadey_cobalt-strike_icedid_satacom_stealc

IMPHASH 8ae0115b68869ae85c6eb2e08cb1b631
SHA256 af3233602a0ada51ab34e035969cc622834d634b148e593b0a5d3e0821445a4c
MD5 17f2c648fc328969250c1b7809f899ff
SHA1 570fd8d71e137c3b5b53ec34313cbdc6bd90d0f1
SHA512 fe1947f8790e682b5453eef8c783fec635da2e7f0bfaca03dfe83d27202d326deffc49b21bcb5757a6ccfa86bd86705c668043fcd613556b380ed484814a7f20
SSDEEP 12288:Mq6i2u8akqslPoUChjGGwT53ichIcGxuENAm7eAF3/:MGj8akqslw/jWpichrMu+Z
TLSH
T1D6F49E3677F842F5E066D174C5539607FBB27C460274C99F13A18AAA2F236B0EE39721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

488016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ImageList_GetIconSize ord413 ord412 ord345 ImageList_ReplaceIcon ord410 ord411 ImageList_Draw ord17

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

gdi32

Polygon SetBkMode CreateRectRgn GetClipRgn SelectClipRgn Polyline SaveDC IntersectClipRect RestoreDC BitBlt ExcludeClipRect GetTextExtentPoint32W RoundRect CreateRectRgnIndirect DeleteObject CreateFontIndirectW CreateSolidBrush CreatePen CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteDC SetTextColor SetBkColor GetDeviceCaps GetObjectW GetStockObject

oleaut32

SysStringByteLen VariantCopy SysStringLen SysAllocStringLen SysAllocString VariantClear

ole32

CoTaskMemFree CoInitialize CoUninitialize OleInitialize CoCreateInstance

user32

GetWindowRect GetParent GetWindowTextW GetWindowTextLengthW SendMessageW LoadStringW EmptyClipboard SetClipboardData CloseClipboard OpenClipboard ScreenToClient GetDlgCtrlID MapWindowPoints CharUpperW GetWindowDC IntersectRect FrameRect OffsetRect GetCursorPos DrawTextW PtInRect RedrawWindow InflateRect DefWindowProcW EndPaint BeginPaint DrawFocusRect EqualRect FillRect AdjustWindowRectEx LoadImageW SetForegroundWindow SetWindowPos ReleaseDC GetDC CreateIconIndirect GetForegroundWindow GetActiveWindow EnumChildWindows GetComboBoxInfo GetSysColor GetSystemMetrics GetClientRect GetClassNameW IsWindowEnabled SetDlgItemTextA GetFocus SetFocus SetCursor LoadCursorW LoadIconW TrackMouseEvent KillTimer SetTimer CheckDlgButton DestroyIcon PostMessageW CheckRadioButton IsDlgButtonChecked SendDlgItemMessageW SetDlgItemTextW EnableWindow GetKeyState EndDialog InvalidateRect SetWindowTextW MessageBoxW DialogBoxParamW SystemParametersInfoW GetMonitorInfoA MonitorFromWindow MapDialogRect GetDlgItem GetWindowLongPtrW SetWindowLongPtrW ShowWindow MoveWindow

advapi32

GetFileSecurityW LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegEnumKeyExW RegDeleteValueW RegOpenKeyExA RegQueryValueExA RegGetValueW OpenProcessToken SetFileSecurityW RegSetValueExW

shell32

ord155 SHOpenFolderAndSelectItems ord190 SHGetPathFromIDListW SHGetPathFromIDListEx SHBrowseForFolderW SHGetFileInfoW

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

uxtheme

BufferedPaintStopAllAnimations EndBufferedAnimation BeginBufferedAnimation GetThemeTransitionDuration CloseThemeData SetWindowTheme DrawThemeBackground GetThemePartSize OpenThemeData GetThemeColor GetThemeFont GetThemeBackgroundContentRect DrawThemeTextEx BufferedPaintRenderAnimation DrawThemeParentBackground

kernel32

GetACP IsValidCodePage FindFirstFileExW HeapReAlloc LCMapStringW HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetCPInfo ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread GetFileType SetStdHandle InitializeCriticalSectionEx EncodePointer FlsFree FlsSetValue FlsGetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive LoadLibraryExA ExpandEnvironmentStringsA GetPrivateProfileStringW VirtualProtect GetPrivateProfileIntW MulDiv SetEvent CreateEventW ResumeThread WaitForSingleObject InitializeCriticalSection SetThreadAffinityMask GetVersion GetLargePageMinimum VirtualAlloc VirtualFree GetCommandLineW lstrcatW SetPriorityClass Sleep WaitForMultipleObjects GetUserDefaultLangID GetSystemDefaultLangID GetProcessTimes QueryPerformanceFrequency QueryPerformanceCounter LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetConsoleMode OpenEventW UnmapViewOfFile MapViewOfFile OpenFileMappingW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStringTypeW FlushFileBuffers GetConsoleOutputCP HeapSize SetFilePointerEx WriteConsoleW GetOEMCP FlsAlloc TerminateProcess SetProcessAffinityMask GetSystemTimeAsFileTime FileTimeToDosDateTime IsProcessorFeaturePresent GlobalMemoryStatusEx GetSystemInfo GetProcessAffinityMask GetModuleHandleA lstrlenW CompareFileTime GetProcAddress GetModuleHandleW GetCurrentProcess GlobalFree GlobalAlloc GetDiskFreeSpaceW GetDiskFreeSpaceExW GetDriveTypeW SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize DeviceIoControl GetLogicalDriveStringsW GetFileAttributesW FindNextStreamW FindFirstStreamW GetLastError FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MultiByteToWideChar WideCharToMultiByte GlobalLock GlobalUnlock FreeLibrary LoadLibraryExW LoadLibraryW GetModuleFileNameW FormatMessageW LocalFree CreateFileW SetFileTime CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW MoveFileWithProgressW CreateHardLinkW CreateDirectoryW DeleteFileW SetLastError SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW GetTickCount GetCurrentThreadId GetCurrentProcessId GetFileInformationByHandle GetStdHandle FindClose FindFirstFileW FindNextFileW

Name

.text

Size

560KB

Virtual Size

559KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_17f2c648fc328969250c1b7809f899ff_amadey_cobalt-strike_icedid_satacom_stealc

comctl32

comdlg32

gdi32

oleaut32

ole32

user32

advapi32

shell32

dwmapi

uxtheme

kernel32

generic