2026-07-14_1a6d4b2cec06d8db505193b96a620878_cobalt-strike_icedid_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-14_1a6d4b2cec06d8db505193b96a620878_cobalt-strike_icedid_njrat_satacom_stealc
Size 296KB
Sample260714-e15lbsgv2v
SHA256 e1db4bfd885baa9e1f86213fc4eb94210981d1a4f415d15a8eaf0340ec0edab3
MD5 1a6d4b2cec06d8db505193b96a620878
SHA1 8ac3cecaf6321c979def2e65668261c5f7145859
SHA512 adb97b0553d0fb487c23c1fae20c85ce15ca317392d3ee231064400999f64f3369244f3408a7641895efde0dd971e30bedb6222340f8b58c0dca0d2b95bb4b38
SSDEEP 3072:m09Ibkb7ZbLVojcXbimMCwKBYjvUhzEW4mHpIjVgUxv/QRC4lwnkxU:ws7fN0zsqcH3Ul/nk
TLSH
T13854F906D7A704F4D7B6E17CF482712BFA6234554B249AEB5FE01A4A2EE32D0C5BB350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_1a6d4b2cec06d8db505193b96a620878_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-07-14_1a6d4b2cec06d8db505193b96a620878_cobalt-strike_icedid_njrat_satacom_stealc

.exe 296KB

2026-07-14_1a6d4b2cec06d8db505193b96a620878_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH 7d56503d75987c3bb55042ad03b3fe1c
SHA256 e1db4bfd885baa9e1f86213fc4eb94210981d1a4f415d15a8eaf0340ec0edab3
MD5 1a6d4b2cec06d8db505193b96a620878
SHA1 8ac3cecaf6321c979def2e65668261c5f7145859
SHA512 adb97b0553d0fb487c23c1fae20c85ce15ca317392d3ee231064400999f64f3369244f3408a7641895efde0dd971e30bedb6222340f8b58c0dca0d2b95bb4b38
SSDEEP 3072:m09Ibkb7ZbLVojcXbimMCwKBYjvUhzEW4mHpIjVgUxv/QRC4lwnkxU:ws7fN0zsqcH3Ul/nk
TLSH
T13854F906D7A704F4D7B6E17CF482712BFA6234554B249AEB5FE01A4A2EE32D0C5BB350
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

129392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

LoadCursorA ClientToScreen GetCursorPos SetCursorPos ShowCursor AdjustWindowRect GetClientRect ReleaseDC GetDC GetForegroundWindow ReleaseCapture SetCapture GetAsyncKeyState ShowWindow DestroyWindow CreateWindowExA RegisterClassA PostQuitMessage DefWindowProcA PeekMessageA DispatchMessageA TranslateMessage

gdi32

SetPixelFormat SelectObject GetTextExtentPoint32A DeleteObject CreateFontA ChoosePixelFormat SwapBuffers

opengl32

glVertex3f glVertex2f wglCreateContext glTexParameteri glTexParameterfv glTexImage2D glTranslatef glViewport glTexEnvi glTexCoord2f glShadeModel glReadBuffer glRasterPos2f glPolygonOffset glOrtho glNewList glMultMatrixf glMatrixMode glLoadMatrixf glLoadIdentity glListBase glLineWidth glGenTextures glGenLists glFrustum glFogi glFogfv glFogf glEndList glEnd glEnable glDrawBuffer glDisable glDepthMask glDepthFunc glColorMask glColor4f glColor3f glClear glCallLists glCallList glBlendFunc glBindTexture glBegin wglUseFontBitmapsA wglMakeCurrent wglGetProcAddress wglDeleteContext

ws2_32

WSAStartup gethostname gethostbyname socket setsockopt sendto recvfrom WSACleanup inet_addr htons ioctlsocket closesocket bind inet_ntoa

advapi32

GetUserNameA

kernel32

LoadLibraryExW VirtualProtect FreeEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo WriteConsoleW LCMapStringW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileType HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent WriteFile GetStdHandle GetProcessHeap GetProcAddress GetModuleHandleExW FreeLibrary TerminateProcess ExitProcess GetCurrentProcess DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError GetLastError RtlUnwindEx RtlLookupFunctionEntry RaiseException RtlPcToFileHeader InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter QueryPerformanceFrequency CreateFileW CloseHandle GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetStringTypeW SetStdHandle QueryPerformanceCounter GetModuleFileNameW

Name

.text

Size

219KB

Virtual Size

218KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_1a6d4b2cec06d8db505193b96a620878_cobalt-strike_icedid_njrat_satacom_stealc

user32

gdi32

opengl32

ws2_32

advapi32

kernel32

generic