2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc
Size 531KB
Sample260808-bzy6dazyaz
SHA256 2363eae07d5abb0273cf4f437b7d40476a078aaec92b10a3841ab0c06c3786e9
MD5 330e7729de95c2f19ede9536d128106d
SHA1 53c080d53ca2d3a5536f2108958731af6f9b0337
SHA512 21bde89fa8148a1741f2d99ae89ef687b8cfa0ac27d92a4b1c9afb48c5c54620fd6e9bc291d4825f59aea445de6351754f4fea941f6833fe78bac5c03df43f73
SSDEEP 12288:vwF3TpVH+6XOMhXtq5vewfbf3FFpBQyqvm:IF39B+6eM1tyvlDHXQyqvm
TLSH
T17DC46D56F3A943F9E1B7C134C5929603EB727886033499DF53A08D7A2F136E19E3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc

File Explorer

2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc

.exe 531KB

2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc

IMPHASH 566acaf60902815c3c2eb9b29d248b9f
SHA256 2363eae07d5abb0273cf4f437b7d40476a078aaec92b10a3841ab0c06c3786e9
MD5 330e7729de95c2f19ede9536d128106d
SHA1 53c080d53ca2d3a5536f2108958731af6f9b0337
SHA512 21bde89fa8148a1741f2d99ae89ef687b8cfa0ac27d92a4b1c9afb48c5c54620fd6e9bc291d4825f59aea445de6351754f4fea941f6833fe78bac5c03df43f73
SSDEEP 12288:vwF3TpVH+6XOMhXtq5vewfbf3FFpBQyqvm:IF39B+6eM1tyvlDHXQyqvm
TLSH
T17DC46D56F3A943F9E1B7C134C5929603EB727886033499DF53A08D7A2F136E19E3A721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

322448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

ord345 ord412 ord410 ord413 ImageList_GetIconSize ImageList_Draw ImageList_ReplaceIcon ord411

oleaut32

SysFreeString SysStringLen SysAllocStringLen SysAllocString VariantClear

ole32

CoCreateInstance CoUninitialize CoInitialize OleInitialize CoTaskMemFree

user32

OpenClipboard CloseClipboard SetClipboardData EmptyClipboard LoadStringW SendMessageW GetWindowTextLengthW GetWindowTextW GetParent GetWindowRect DialogBoxParamW CharUpperW SetWindowTextW InvalidateRect SetFocus PostMessageW EnableWindow GetKeyState SetDlgItemTextW EndDialog GetFocus DestroyIcon CheckDlgButton IsDlgButtonChecked SetTimer KillTimer LoadIconW SystemParametersInfoW GetMonitorInfoA MonitorFromWindow MapDialogRect GetDlgItem GetWindowLongPtrW SetWindowLongPtrW ScreenToClient MoveWindow LoadCursorW GetDlgCtrlID MapWindowPoints TrackMouseEvent GetWindowDC IntersectRect FrameRect OffsetRect MessageBoxW GetCursorPos DrawTextW PtInRect RedrawWindow InflateRect DefWindowProcW EndPaint BeginPaint DrawFocusRect EqualRect FillRect AdjustWindowRectEx LoadImageW SetForegroundWindow SetWindowPos ReleaseDC GetDC CreateIconIndirect GetForegroundWindow GetActiveWindow EnumChildWindows GetComboBoxInfo GetSysColor IsWindowEnabled GetSystemMetrics GetClientRect GetClassNameW SetCursor ShowWindow

advapi32

RegGetValueW

shell32

SHGetPathFromIDListW SHGetFileInfoW SHBrowseForFolderW SHGetPathFromIDListEx

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

uxtheme

BufferedPaintRenderAnimation BufferedPaintStopAllAnimations EndBufferedAnimation CloseThemeData SetWindowTheme DrawThemeBackground GetThemePartSize OpenThemeData GetThemeColor GetThemeFont GetThemeBackgroundContentRect DrawThemeParentBackground BeginBufferedAnimation DrawThemeTextEx GetThemeTransitionDuration

gdi32

IntersectClipRect SaveDC Polyline CreateRectRgnIndirect GetClipRgn BitBlt SetBkMode Polygon SelectClipRgn ExcludeClipRect RestoreDC RoundRect GetObjectW GetStockObject GetDeviceCaps SetBkColor SetTextColor CreateFontIndirectW DeleteDC SelectObject CreateCompatibleBitmap CreateCompatibleDC CreatePen DeleteObject CreateSolidBrush GetTextExtentPoint32W CreateRectRgn

kernel32

WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize GetStringTypeW SetStdHandle GetFileType GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW LCMapStringW UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext HeapAlloc HeapFree HeapReAlloc TerminateProcess ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread InitializeCriticalSectionEx EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry InitializeSListHead QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetPrivateProfileStringW VirtualProtect GetPrivateProfileIntW MulDiv CreateSemaphoreW ResetEvent SetEvent CreateEventW WaitForSingleObject InitializeCriticalSection ReleaseSemaphore GetModuleHandleW GetVersion IsProcessorFeaturePresent VirtualAlloc VirtualFree SetPriorityClass Sleep WaitForMultipleObjects LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetSystemTimeAsFileTime GlobalMemoryStatusEx GetSystemInfo GetProcessAffinityMask GetProcAddress GetModuleHandleA GetCurrentProcess CompareFileTime GlobalFree GlobalAlloc SetEndOfFile WriteFile ReadFile SetFilePointer GetFileSize GetLogicalDriveStringsW GetFileAttributesW FindNextStreamW FindFirstStreamW FindNextFileW FindFirstFileW FindClose GetStdHandle GetFileInformationByHandle GetCurrentProcessId GetCurrentThreadId GetTickCount GetCurrentDirectoryW GetModuleFileNameW SetLastError DeleteFileW GetCommandLineW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime MultiByteToWideChar GetLastError WideCharToMultiByte GlobalLock GlobalUnlock FreeLibrary LoadLibraryExW FormatMessageW LocalFree GetSystemDirectoryW CreateFileW SetFileTime CloseHandle SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW

Name

.text

Size

394KB

Virtual Size

394KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

102KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_330e7729de95c2f19ede9536d128106d_amadey_cobalt-strike_icedid_satacom_stealc

comctl32

oleaut32

ole32

user32

advapi32

shell32

dwmapi

uxtheme

gdi32

kernel32

generic