2026-08-03_fa969b0b1864d0eaccff0d34a2cdc935_cobalt-strike_icedid_satacom

General

Target
2026-08-03_fa969b0b1864d0eaccff0d34a2cdc935_cobalt-strike_icedid_satacom
Size 99KB
Sample260804-krf49sbm9z
SHA256 86554aec64ce7b442dc0f53c7465e8d6fdae970e0b408d85a6036147fcfae781
MD5 fa969b0b1864d0eaccff0d34a2cdc935
SHA1 658c415537bd9e0a26756d3eec48c8be04cf0d29
SHA512 6847503c0d5149f4b8340fe83d6118f2a0bccc5286ae3944b7486eba53f59cfd1902273c0d29995641d8f2aea62675dca7702a8266c7e18d645c52e1c50ba314
SSDEEP 3072:dqR0aMOGyy06Nlx9RuEb4oP9OJzsH5ylnNd:/OGyy06/Jd4oPU9nNd
TLSH
T15EA32957B3E520F9E1B28A3884954A49DB75F8351B219FEF03B442961F237E48D3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_fa969b0b1864d0eaccff0d34a2cdc935_cobalt-strike_icedid_satacom

File Explorer

2026-08-03_fa969b0b1864d0eaccff0d34a2cdc935_cobalt-strike_icedid_satacom

.exe 99KB

2026-08-03_fa969b0b1864d0eaccff0d34a2cdc935_cobalt-strike_icedid_satacom

IMPHASH 5c82018e83dd5f1d305454ecd57a9cf1
SHA256 86554aec64ce7b442dc0f53c7465e8d6fdae970e0b408d85a6036147fcfae781
MD5 fa969b0b1864d0eaccff0d34a2cdc935
SHA1 658c415537bd9e0a26756d3eec48c8be04cf0d29
SHA512 6847503c0d5149f4b8340fe83d6118f2a0bccc5286ae3944b7486eba53f59cfd1902273c0d29995641d8f2aea62675dca7702a8266c7e18d645c52e1c50ba314
SSDEEP 3072:dqR0aMOGyy06Nlx9RuEb4oP9OJzsH5ylnNd:/OGyy06/Jd4oPU9nNd
TLSH
T15EA32957B3E520F9E1B28A3884954A49DB75F8351B219FEF03B442961F237E48D3AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

6

Entry point

4736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_APPCONTAINER IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winstore.app

__managed__Main

api-ms-win-crt-string-l1-1-0

memset

kernel32

FindFirstFileExW WriteConsoleW CloseHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

ntdll

__chkstk wcschr

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage

Name

.text

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_fa969b0b1864d0eaccff0d34a2cdc935_cobalt-strike_icedid_satacom

winstore.app

api-ms-win-crt-string-l1-1-0

kernel32

ntdll

api-ms-win-core-com-l1-1-0

generic