2026-07-12_e1480bf8a2db3217fe6ec7fb00e8e7e9_cobalt-strike_icedid_satacom

General

Target
2026-07-12_e1480bf8a2db3217fe6ec7fb00e8e7e9_cobalt-strike_icedid_satacom
Size 802KB
Sample260712-3r2ebabz2w
SHA256 6ab1895f0fdd580b8343ce7bf82bf32bff6a0def4ce45f90597d766bd1adfcc3
MD5 e1480bf8a2db3217fe6ec7fb00e8e7e9
SHA1 cecdd18fce907585e2f5541fb402bfc781e2b2f7
SHA512 2e151939008efa582e60dfee30093827e352ff1f463df1869102bc2f3fda77f24e5eb6bbbcea88a0016d79f78633b89a0adc809e9d0b1d19649299be13307f16
SSDEEP 12288:fiYrN6246/wq7oPMWHLrB2NKYM8nroOsKF0r3oXOoR:KYsRPRrrBfYjkNK2r3S7R
TLSH
T11605C08B0B4411E3C6F302BE98195161B9F230AB0361478A65FD41EC3F5E2F9BAB71E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_e1480bf8a2db3217fe6ec7fb00e8e7e9_cobalt-strike_icedid_satacom

File Explorer

2026-07-12_e1480bf8a2db3217fe6ec7fb00e8e7e9_cobalt-strike_icedid_satacom

.exe 802KB

2026-07-12_e1480bf8a2db3217fe6ec7fb00e8e7e9_cobalt-strike_icedid_satacom

IMPHASH a787422dd40560c712063498e417bd35
SHA256 6ab1895f0fdd580b8343ce7bf82bf32bff6a0def4ce45f90597d766bd1adfcc3
MD5 e1480bf8a2db3217fe6ec7fb00e8e7e9
SHA1 cecdd18fce907585e2f5541fb402bfc781e2b2f7
SHA512 2e151939008efa582e60dfee30093827e352ff1f463df1869102bc2f3fda77f24e5eb6bbbcea88a0016d79f78633b89a0adc809e9d0b1d19649299be13307f16
SSDEEP 12288:fiYrN6246/wq7oPMWHLrB2NKYM8nroOsKF0r3oXOoR:KYsRPRrrBfYjkNK2r3S7R
TLSH
T11605C08B0B4411E3C6F302BE98195161B9F230AB0361478A65FD41EC3F5E2F9BAB71E5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11936

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCommandLineA GetCurrentDirectoryA CreateFileA GetFileAttributesA WriteFile GetTempPathA CloseHandle GetLastError GetCurrentProcess GetCurrentProcessId FlushInstructionCache GetTickCount GetSystemDirectoryA GetWindowsDirectoryA VirtualAlloc VirtualProtect VirtualFree GetModuleFileNameA GetProcAddress LoadLibraryA lstrcpyA lstrcatA GetComputerNameA GetUserDefaultLCID WriteConsoleW CreateFileW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

user32

wsprintfA

Name

.text

Size

58KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

730KB

Virtual Size

732KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_e1480bf8a2db3217fe6ec7fb00e8e7e9_cobalt-strike_icedid_satacom

kernel32

user32

generic