2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc
Size 531KB
Sample260730-ksbwyavbmd
SHA256 c2f5dc622d589b2c63ad0fdc9cadd5f50ef7dbe48e78ca1864d5c26fb494f19a
MD5 855cc742e942fee2df057b0e4ce34bea
SHA1 bfea3fae0cc9bb3faabb7f718fdebea5ea8893e4
SHA512 79bb4574336bb5d4219c0c2b66e1fda28e8bb817b28e0d8ce7e9518f33dcc5f6b43d594b0fadd4278318f8621659125c5c32f2ec2b862fabc662abd6ac34c046
SSDEEP 6144:MuiFOcdLQ4QebNouP0o6nq/+ZkO4riNVTrJIduapSZ6IXDAOl8anDAhFHnp909qJ:2O3exoaWnW/QVVZ6IzTSaDqnp90Piqvm
TLSH
T1D7C46E56F7A943F9E177C134C5929603EB72788A033499DF13A0897A2F136E19E3D721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc

File Explorer

2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc

.exe 531KB

2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc

IMPHASH 566acaf60902815c3c2eb9b29d248b9f
SHA256 c2f5dc622d589b2c63ad0fdc9cadd5f50ef7dbe48e78ca1864d5c26fb494f19a
MD5 855cc742e942fee2df057b0e4ce34bea
SHA1 bfea3fae0cc9bb3faabb7f718fdebea5ea8893e4
SHA512 79bb4574336bb5d4219c0c2b66e1fda28e8bb817b28e0d8ce7e9518f33dcc5f6b43d594b0fadd4278318f8621659125c5c32f2ec2b862fabc662abd6ac34c046
SSDEEP 6144:MuiFOcdLQ4QebNouP0o6nq/+ZkO4riNVTrJIduapSZ6IXDAOl8anDAhFHnp909qJ:2O3exoaWnW/QVVZ6IzTSaDqnp90Piqvm
TLSH
T1D7C46E56F7A943F9E177C134C5929603EB72788A033499DF13A0897A2F136E19E3D721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

322400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord345 ord412 ord410 ord413 ImageList_GetIconSize ImageList_Draw ImageList_ReplaceIcon ord411

oleaut32

SysFreeString SysStringLen SysAllocStringLen SysAllocString VariantClear

ole32

CoCreateInstance CoUninitialize CoInitialize OleInitialize CoTaskMemFree

user32

OpenClipboard CloseClipboard SetClipboardData EmptyClipboard LoadStringW SendMessageW GetWindowTextLengthW GetWindowTextW GetParent GetWindowRect DialogBoxParamW CharUpperW SetWindowTextW InvalidateRect SetFocus PostMessageW EnableWindow GetKeyState SetDlgItemTextW EndDialog GetFocus DestroyIcon CheckDlgButton IsDlgButtonChecked SetTimer KillTimer LoadIconW SystemParametersInfoW GetMonitorInfoA MonitorFromWindow MapDialogRect GetDlgItem GetWindowLongPtrW SetWindowLongPtrW ScreenToClient MoveWindow LoadCursorW GetDlgCtrlID MapWindowPoints TrackMouseEvent GetWindowDC IntersectRect FrameRect OffsetRect MessageBoxW GetCursorPos DrawTextW PtInRect RedrawWindow InflateRect DefWindowProcW EndPaint BeginPaint DrawFocusRect EqualRect FillRect AdjustWindowRectEx LoadImageW SetForegroundWindow SetWindowPos ReleaseDC GetDC CreateIconIndirect GetForegroundWindow GetActiveWindow EnumChildWindows GetComboBoxInfo GetSysColor IsWindowEnabled GetSystemMetrics GetClientRect GetClassNameW SetCursor ShowWindow

advapi32

RegGetValueW

shell32

SHGetPathFromIDListW SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListEx

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

uxtheme

BufferedPaintRenderAnimation BufferedPaintStopAllAnimations EndBufferedAnimation CloseThemeData SetWindowTheme DrawThemeBackground GetThemePartSize OpenThemeData GetThemeColor GetThemeFont GetThemeBackgroundContentRect DrawThemeParentBackground BeginBufferedAnimation DrawThemeTextEx GetThemeTransitionDuration

gdi32

IntersectClipRect SaveDC Polyline CreateRectRgnIndirect GetClipRgn BitBlt SetBkMode Polygon SelectClipRgn ExcludeClipRect RestoreDC RoundRect GetObjectW GetStockObject GetDeviceCaps SetBkColor SetTextColor CreateFontIndirectW DeleteDC SelectObject CreateCompatibleBitmap CreateCompatibleDC CreatePen DeleteObject CreateSolidBrush GetTextExtentPoint32W CreateRectRgn

kernel32

WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize GetStringTypeW SetStdHandle GetFileType GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW LCMapStringW UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapAlloc HeapFree HeapReAlloc TerminateProcess ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread InitializeCriticalSectionEx EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetPrivateProfileStringW VirtualProtect GetPrivateProfileIntW MulDiv CreateSemaphoreW ResetEvent SetEvent CreateEventW WaitForSingleObject InitializeCriticalSection ReleaseSemaphore GetModuleHandleW GetVersion IsProcessorFeaturePresent VirtualAlloc VirtualFree SetPriorityClass Sleep WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetSystemTimeAsFileTime GlobalMemoryStatusEx GetSystemInfo GetProcessAffinityMask GetProcAddress GetModuleHandleA GetCurrentProcess CompareFileTime GlobalFree GlobalAlloc SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetLogicalDriveStringsW GetFileAttributesW FindNextStreamW FindFirstStreamW FindNextFileW FindFirstFileW FindClose GetStdHandle GetFileInformationByHandle GetCurrentProcessId GetCurrentThreadId GetTickCount GetCurrentDirectoryW GetModuleFileNameW SetLastError DeleteFileW GetCommandLineW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MultiByteToWideChar GetLastError WideCharToMultiByte GlobalLock GlobalUnlock FreeLibrary LoadLibraryExW FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW

Name

.text

Size

394KB

Virtual Size

393KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

102KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_855cc742e942fee2df057b0e4ce34bea_amadey_cobalt-strike_icedid_satacom_stealc

comctl32

oleaut32

ole32

user32

advapi32

shell32

dwmapi

uxtheme

gdi32

kernel32

generic