2026-07-11_80429a2ff65e1be8f3c583dc3f2a6264_cobalt-strike_icedid_satacom

General

Target
2026-07-11_80429a2ff65e1be8f3c583dc3f2a6264_cobalt-strike_icedid_satacom
Size 106KB
Sample260711-e2pw9sdx7w
SHA256 a6b719fcbc63458f78884f4b3a2ea523de83a543de0f690ab10ebfd2d9c35fbe
MD5 80429a2ff65e1be8f3c583dc3f2a6264
SHA1 de8179cfe6090db8a02dd70615fcfb2ecebd7d6f
SHA512 d5dc76f1df4e0b6ee0f1f5804880576b286bf7ea1129dd07d8b122685485e489cae22af0586e3a6eab768087a2ad87dfcb91d19afb20d0dc73683ed6632131b6
SSDEEP 3072:7NkDqRr7DMq966TuIjfW/FHjhQcpzUkSP:BMqRnBTuefWt2T
TLSH
T17FB36B5763E930F9E0B79A38C4950A49E772B83207619FEF07A4469A1F236D18D3DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_80429a2ff65e1be8f3c583dc3f2a6264_cobalt-strike_icedid_satacom

File Explorer

2026-07-11_80429a2ff65e1be8f3c583dc3f2a6264_cobalt-strike_icedid_satacom

.exe 106KB

2026-07-11_80429a2ff65e1be8f3c583dc3f2a6264_cobalt-strike_icedid_satacom

IMPHASH c7d5a0648cba41b919c08e1684340425
SHA256 a6b719fcbc63458f78884f4b3a2ea523de83a543de0f690ab10ebfd2d9c35fbe
MD5 80429a2ff65e1be8f3c583dc3f2a6264
SHA1 de8179cfe6090db8a02dd70615fcfb2ecebd7d6f
SHA512 d5dc76f1df4e0b6ee0f1f5804880576b286bf7ea1129dd07d8b122685485e489cae22af0586e3a6eab768087a2ad87dfcb91d19afb20d0dc73683ed6632131b6
SSDEEP 3072:7NkDqRr7DMq966TuIjfW/FHjhQcpzUkSP:BMqRnBTuefWt2T
TLSH
T17FB36B5763E930F9E0B79A38C4950A49E772B83207619FEF07A4469A1F236D18D3DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadFile GetModuleFileNameA HeapFree lstrcatA GetModuleHandleA CreateFileA CloseHandle HeapAlloc GetFileSize GetProcessHeap WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

760B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_80429a2ff65e1be8f3c583dc3f2a6264_cobalt-strike_icedid_satacom

kernel32

generic