2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom
Size 361KB
Sample260802-ngrd2a1hmd
SHA256 a8acc316637fc8957d5245ad23c260c8d519aa789748b7a45990189a8f9319b5
MD5 7c6b83b67fb837e1fbe5c071b86196de
SHA1 e972be51cbf3d913dc01bfa977eb8d69ca60dcba
SHA512 91003413ef0becee78cb6eb17970dc7878e4a13292b77864116b6e65538226f2d5fe36a743c55224be01f46f40179cf76e849f60f6669c0ae1154ac432b0d102
SSDEEP 6144:C6HcTTbL7j8zR3QHkL0faGF5MVJKBIm1WCehaMN/rpJEb8pQ5CZT2P8:C5mUOKWCkv/DE4uCZTy
TLSH
T17C748D15E7A404FDE1B7D178CA660906DB72BC4A0370ABDF03945AA71F276E09E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom

File Explorer

2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom

.exe 361KB

2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom

IMPHASH 8b1c0b25eaf07966b0b941119842d858
SHA256 a8acc316637fc8957d5245ad23c260c8d519aa789748b7a45990189a8f9319b5
MD5 7c6b83b67fb837e1fbe5c071b86196de
SHA1 e972be51cbf3d913dc01bfa977eb8d69ca60dcba
SHA512 91003413ef0becee78cb6eb17970dc7878e4a13292b77864116b6e65538226f2d5fe36a743c55224be01f46f40179cf76e849f60f6669c0ae1154ac432b0d102
SSDEEP 6144:C6HcTTbL7j8zR3QHkL0faGF5MVJKBIm1WCehaMN/rpJEb8pQ5CZT2P8:C5mUOKWCkv/DE4uCZTy
TLSH
T17C748D15E7A404FDE1B7D178CA660906DB72BC4A0370ABDF03945AA71F276E09E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

197280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Process32NextW DeleteFileW Process32FirstW CloseHandle GetSystemInfo LoadLibraryW GetProcAddress LocalFree GetComputerNameW GlobalMemoryStatusEx GetModuleHandleW FreeLibrary CopyFileW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer GetTickCount64 MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo SetEndOfFile WriteConsoleW HeapSize Sleep CreateToolhelp32Snapshot GetFileAttributesW FindClose GetTempPathW FindNextFileW CreateFileW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileExW DecodePointer FindFirstFileW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree VirtualProtect LoadLibraryExW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc RtlUnwind

user32

GetSystemMetrics

advapi32

GetUserNameW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryValueExW

winhttp

WinHttpReceiveResponse WinHttpSendRequest WinHttpConnect WinHttpCrackUrl WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpCloseHandle

shell32

SHGetFolderPathW

crypt32

CryptUnprotectData

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_7c6b83b67fb837e1fbe5c071b86196de_cobalt-strike_icedid_njrat_satacom

kernel32

user32

advapi32

winhttp

shell32

crypt32

generic