2026-07-09_6ad4efa3ed9e327dd7462bbc44855310_cobalt-strike_icedid_njrat_satacom

General

Target
2026-07-09_6ad4efa3ed9e327dd7462bbc44855310_cobalt-strike_icedid_njrat_satacom
Size 146KB
Sample260709-ecnb5sds6x
SHA256 7caac1beaa7da3711c6d91ef972fed72f95a55259e9c4d68f164d8f9ecce4c63
MD5 6ad4efa3ed9e327dd7462bbc44855310
SHA1 e1f10472edaf4358df3f3ad69264084ca78ac2d8
SHA512 8316deff1bf6ce4534cc37d9cb0720ca31420c73f11b2c03cbe75961c5cb3eec55f2385759aae5222a201c09ebe94820ce0f1a9a130db7a6205cbc42a5a79b78
SSDEEP 3072:X0Lz/EV9YMcz+5Jqvg/wGsOtRI0FEEOn//AqD:4m9ozzU3tCPEg
TLSH
T198E36B57B3A530F9E0738239C9A14646FB72783647609BEF03A446762F233D19D3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-09_6ad4efa3ed9e327dd7462bbc44855310_cobalt-strike_icedid_njrat_satacom

File Explorer

2026-07-09_6ad4efa3ed9e327dd7462bbc44855310_cobalt-strike_icedid_njrat_satacom

.exe 146KB

2026-07-09_6ad4efa3ed9e327dd7462bbc44855310_cobalt-strike_icedid_njrat_satacom

IMPHASH 56717a813b7a802c539f1255bbcfd3b0
SHA256 7caac1beaa7da3711c6d91ef972fed72f95a55259e9c4d68f164d8f9ecce4c63
MD5 6ad4efa3ed9e327dd7462bbc44855310
SHA1 e1f10472edaf4358df3f3ad69264084ca78ac2d8
SHA512 8316deff1bf6ce4534cc37d9cb0720ca31420c73f11b2c03cbe75961c5cb3eec55f2385759aae5222a201c09ebe94820ce0f1a9a130db7a6205cbc42a5a79b78
SSDEEP 3072:X0Lz/EV9YMcz+5Jqvg/wGsOtRI0FEEOn//AqD:4m9ozzU3tCPEg
TLSH
T198E36B57B3A530F9E0738239C9A14646FB72783647609BEF03A446762F233D19D3AB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage LoadCursorA GetParent MessageBoxA GetClientRect GetWindowTextA SetWindowTextA UpdateWindow GetSystemMetrics SetWindowPos ShowWindow DestroyWindow CreateWindowExA RegisterClassA PostQuitMessage DefWindowProcA DispatchMessageA GetMessageA

comctl32

ord410 ord413

kernel32

ReadConsoleW ReadFile HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx CreateFileW SetEndOfFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW SetStdHandle WriteConsoleW CloseHandle GetModuleHandleExW GetCurrentProcessId AllocConsole QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW FreeEnvironmentStringsW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetProcAddress IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW

Name

.text

Size

90KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-09_6ad4efa3ed9e327dd7462bbc44855310_cobalt-strike_icedid_njrat_satacom

user32

comctl32

kernel32

generic