2026-07-14_8849a0fafc732efed0584114530ac22b_cobalt-strike_icedid_satacom_stealc

General

Target
2026-07-14_8849a0fafc732efed0584114530ac22b_cobalt-strike_icedid_satacom_stealc
Size 258KB
Sample260714-d4tskafx6x
SHA256 ac4e63f1f148e3b189fc2b0d9de622e2a4fe33217f1b9ae379a333248294db2e
MD5 8849a0fafc732efed0584114530ac22b
SHA1 9a62f0491e86c88b513b4808912147445e579985
SHA512 2510f2005f083281677f5332cdb931c00f3f9c67c3f19be32f6396a721009f1c6b75a02bf1649f597e25fae97d4bede832b71fb191c88d143c42b081d90099d4
SSDEEP 3072:ITrf42Eg5nGZgDxkU3p7s1ROggttCcGPTj2hNmOlQ6TXJ10lAsLEYQOqDDLLg:/qG6DiU57s/Ox27gbTxD3
TLSH
T155447D1977A40CFDED7BC67DC9424906EB72BC4687A0E68F13A04AA64F336909D3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_8849a0fafc732efed0584114530ac22b_cobalt-strike_icedid_satacom_stealc

File Explorer

2026-07-14_8849a0fafc732efed0584114530ac22b_cobalt-strike_icedid_satacom_stealc

.exe 258KB

2026-07-14_8849a0fafc732efed0584114530ac22b_cobalt-strike_icedid_satacom_stealc

IMPHASH e3e7cf79c2a786c9bc498c64b8fd609a
SHA256 ac4e63f1f148e3b189fc2b0d9de622e2a4fe33217f1b9ae379a333248294db2e
MD5 8849a0fafc732efed0584114530ac22b
SHA1 9a62f0491e86c88b513b4808912147445e579985
SHA512 2510f2005f083281677f5332cdb931c00f3f9c67c3f19be32f6396a721009f1c6b75a02bf1649f597e25fae97d4bede832b71fb191c88d143c42b081d90099d4
SSDEEP 3072:ITrf42Eg5nGZgDxkU3p7s1ROggttCcGPTj2hNmOlQ6TXJ10lAsLEYQOqDDLLg:/qG6DiU57s/Ox27gbTxD3
TLSH
T155447D1977A40CFDED7BC67DC9424906EB72BC4687A0E68F13A04AA64F336909D3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50384

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ReleaseDC GetDC GetSystemMetrics GetAsyncKeyState GetKeyState wsprintfA

gdi32

SelectObject GetDIBits DeleteObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap BitBlt

kernel32

GetProcessHeap HeapSize CreateFileW WriteConsoleW SetEndOfFile CloseHandle SetStdHandle GetEnvironmentVariableA DeleteFileA FindClose FindFirstFileA FindNextFileA GetLastError CreateMutexA Sleep GetTickCount GetModuleFileNameA GetProcAddress LoadLibraryA GetComputerNameA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW SetEnvironmentVariableW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree RtlUnwind DuplicateHandle GetCurrentProcess CreateProcessW IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW WaitForSingleObject GetExitCodeProcess GetFileAttributesExW CreatePipe HeapReAlloc FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

Name

.text

Size

163KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_8849a0fafc732efed0584114530ac22b_cobalt-strike_icedid_satacom_stealc

user32

gdi32

kernel32

generic