2026-07-14_07b36a47c8e99b0131d10adec574ca6e_cobalt-strike_icedid_satacom_stealc

General

Target
2026-07-14_07b36a47c8e99b0131d10adec574ca6e_cobalt-strike_icedid_satacom_stealc
Size 254KB
Sample260714-e9asbaet9m
SHA256 755e4b6ca5dc66470e827e5130f80286c8af82a967d0118fe22fea1582fed285
MD5 07b36a47c8e99b0131d10adec574ca6e
SHA1 d8c5a705f4707faca3f3fd51956cb045074838ed
SHA512 ca676924874608a0e4b2c7553a39ae7fc2fc3b00b5638209bc8e3c118ab13df1c3f928f67697fe03bcb48165be49a505aba79c18044f106a04e790961816b4fb
SSDEEP 3072:jTMidmKOxJ3soWD+PtzpPQMxIiKQtOZ+wDC8UifjTO2oY7zxM01As+PMlVSU5:0KoJ8pDEt9PQMO83yBNoY7T
TLSH
T1E3448D1A77A40CFDED7BC67DC9424905EA72BC5647B0E68F13A00A971F236A09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-14_07b36a47c8e99b0131d10adec574ca6e_cobalt-strike_icedid_satacom_stealc

File Explorer

2026-07-14_07b36a47c8e99b0131d10adec574ca6e_cobalt-strike_icedid_satacom_stealc

.exe 254KB

2026-07-14_07b36a47c8e99b0131d10adec574ca6e_cobalt-strike_icedid_satacom_stealc

IMPHASH f8931fe89f97427f61b4dc0a9e486417
SHA256 755e4b6ca5dc66470e827e5130f80286c8af82a967d0118fe22fea1582fed285
MD5 07b36a47c8e99b0131d10adec574ca6e
SHA1 d8c5a705f4707faca3f3fd51956cb045074838ed
SHA512 ca676924874608a0e4b2c7553a39ae7fc2fc3b00b5638209bc8e3c118ab13df1c3f928f67697fe03bcb48165be49a505aba79c18044f106a04e790961816b4fb
SSDEEP 3072:jTMidmKOxJ3soWD+PtzpPQMxIiKQtOZ+wDC8UifjTO2oY7zxM01As+PMlVSU5:0KoJ8pDEt9PQMO83yBNoY7T
TLSH
T1E3448D1A77A40CFDED7BC67DC9424905EA72BC5647B0E68F13A00A971F236A09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

50976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

ReleaseDC GetDC GetSystemMetrics GetAsyncKeyState GetKeyState wsprintfA

gdi32

SelectObject GetDIBits DeleteObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap BitBlt

kernel32

GetProcessHeap HeapSize CreateFileW WriteConsoleW SetEndOfFile FlsSetValue SetStdHandle GetEnvironmentVariableA DeleteFileA FindClose FindFirstFileA FindNextFileA IsDebuggerPresent CheckRemoteDebuggerPresent GetLastError CreateMutexA Sleep GetCurrentProcess GetTickCount GetModuleFileNameA GetProcAddress LoadLibraryA GetComputerNameA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW SetEnvironmentVariableW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue RtlUnwind FlsFree CloseHandle DuplicateHandle CreateProcessW IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW HeapFree RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter HeapAlloc VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW WaitForSingleObject GetExitCodeProcess GetFileAttributesExW CreatePipe HeapReAlloc FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

Name

.text

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

5KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-14_07b36a47c8e99b0131d10adec574ca6e_cobalt-strike_icedid_satacom_stealc

user32

gdi32

kernel32

generic