2026-07-27_7b483613dbabcbdaa9d7a6de8ca2bdde_cobalt-strike_icedid_njrat_satacom_stealc

General

Target
2026-07-27_7b483613dbabcbdaa9d7a6de8ca2bdde_cobalt-strike_icedid_njrat_satacom_stealc
Size 225KB
Sample260727-qdzx4sshph
SHA256 8e6c42f2a43be0de20553cbea46950f5e7a83f3a5c76b8a49214599a47b52b6e
MD5 7b483613dbabcbdaa9d7a6de8ca2bdde
SHA1 51d76e8891b38900861203e0df571391da1844ff
SHA512 d35ba0c93f3f23a72e9569ba012910988952868b7e68b920ee19f8fac82b34772b9b080884fa0b75ac262f4af36d0f43e27f45863f7248563d135870bb5bca13
SSDEEP 6144:CVaikx70ec3FYBMBcVgiNPUiso7a7soSGMi:CVVugd3FziCloe7zMi
TLSH
T14E347B4AB7A51CF9E872817D88910701EBB67C254720DAFF37AC4256AF232E49C3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-27_7b483613dbabcbdaa9d7a6de8ca2bdde_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-07-27_7b483613dbabcbdaa9d7a6de8ca2bdde_cobalt-strike_icedid_njrat_satacom_stealc

.exe 225KB

2026-07-27_7b483613dbabcbdaa9d7a6de8ca2bdde_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH cd14a7b931ba98cf9ff3b81d7cfbbea0
SHA256 8e6c42f2a43be0de20553cbea46950f5e7a83f3a5c76b8a49214599a47b52b6e
MD5 7b483613dbabcbdaa9d7a6de8ca2bdde
SHA1 51d76e8891b38900861203e0df571391da1844ff
SHA512 d35ba0c93f3f23a72e9569ba012910988952868b7e68b920ee19f8fac82b34772b9b080884fa0b75ac262f4af36d0f43e27f45863f7248563d135870bb5bca13
SSDEEP 6144:CVaikx70ec3FYBMBcVgiNPUiso7a7soSGMi:CVVugd3FziCloe7zMi
TLSH
T14E347B4AB7A51CF9E872817D88910701EBB67C254720DAFF37AC4256AF232E49C3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

24928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

GetTickCount GetSystemDirectoryA GetModuleHandleW WideCharToMultiByte CreateToolhelp32Snapshot Module32FirstW Module32NextW K32EnumDeviceDrivers K32GetDeviceDriverBaseNameA MultiByteToWideChar QueryPerformanceCounter FreeLibrary GetProcAddress SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP Sleep FindNextFileW FindFirstFileExW FindClose GetFileSizeEx SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType LCMapStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetLastError CloseHandle WriteFile ReadFile GetStdHandle GetModuleFileNameW GetFileSize CreateFileW CreateFileA GetCurrentProcessId GetModuleHandleExW HeapReAlloc HeapSize WriteConsoleW IsValidCodePage ReleaseSRWLockExclusive AcquireSRWLockExclusive GetCurrentThreadId SetUnhandledExceptionFilter GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection IsProcessorFeaturePresent GetCurrentProcess ExitProcess TerminateProcess GetStringTypeW

user32

FindWindowW SetWindowLongW GetWindowLongW ClientToScreen MessageBoxA GetClientRect SetWindowPos SetLayeredWindowAttributes ShowWindow IsWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PeekMessageW DispatchMessageW TranslateMessage

Name

.text

Size

110KB

Virtual Size

109KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-27_7b483613dbabcbdaa9d7a6de8ca2bdde_cobalt-strike_icedid_njrat_satacom_stealc

d3d11

kernel32

user32

generic