2026-07-23_0a8e2a9ab0a2a1cd34899e7548417e64_cobalt-strike_icedid_satacom

General

Target
2026-07-23_0a8e2a9ab0a2a1cd34899e7548417e64_cobalt-strike_icedid_satacom
Size 708KB
Sample260723-grhrbaha68
SHA256 7ca3e2592b3c1f7c3c6087c6c729db697b301efa190fcb72ce9ea8316885b18a
MD5 0a8e2a9ab0a2a1cd34899e7548417e64
SHA1 1edea0a05430ed76007fc608f6613f721013373a
SHA512 5dfd5b783c3f15506a267171c7c5b180bbfaca64909e6f3c824f35a6d737c29c52f63b0ed2ab9a02844ec657bc74494fcb8215357294ef02eca31fbe7f0603cf
SSDEEP 12288:YAF9S9RVgeU5IUfJc37u4I/srDJJwHHI6QJnT5kK8/qCRsxDZD66JZ:YAF9Ygd5Ivu4IiFJB77Bb3JZ
TLSH
T141F4F1506F5530B9EE60133B93AA3DE8E27954104F64AADF8BE045FF9E476C0947AE30
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_0a8e2a9ab0a2a1cd34899e7548417e64_cobalt-strike_icedid_satacom

File Explorer

2026-07-23_0a8e2a9ab0a2a1cd34899e7548417e64_cobalt-strike_icedid_satacom

.exe 708KB

2026-07-23_0a8e2a9ab0a2a1cd34899e7548417e64_cobalt-strike_icedid_satacom

IMPHASH 276e5259e2712c75c23359b0279a55bf
SHA256 7ca3e2592b3c1f7c3c6087c6c729db697b301efa190fcb72ce9ea8316885b18a
MD5 0a8e2a9ab0a2a1cd34899e7548417e64
SHA1 1edea0a05430ed76007fc608f6613f721013373a
SHA512 5dfd5b783c3f15506a267171c7c5b180bbfaca64909e6f3c824f35a6d737c29c52f63b0ed2ab9a02844ec657bc74494fcb8215357294ef02eca31fbe7f0603cf
SSDEEP 12288:YAF9S9RVgeU5IUfJc37u4I/srDJJwHHI6QJnT5kK8/qCRsxDZD66JZ:YAF9Ygd5Ivu4IiFJB77Bb3JZ
TLSH
T141F4F1506F5530B9EE60133B93AA3DE8E27954104F64AADF8BE045FF9E476C0947AE30
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHGetFolderPathW

kernel32

RtlCaptureContext WriteConsoleW CreateDirectoryW CreateFileW WriteFile CloseHandle GetLastError CreateProcessW VirtualAlloc VirtualFree lstrcpynW lstrcatW lstrlenW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress IsProcessorFeaturePresent RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

645KB

Virtual Size

644KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_0a8e2a9ab0a2a1cd34899e7548417e64_cobalt-strike_icedid_satacom

shell32

kernel32

generic