2026-08-10_746d9ba8c40502465def4c8b30509b9d_cobalt-strike_icedid_njrat_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_746d9ba8c40502465def4c8b30509b9d_cobalt-strike_icedid_njrat_satacom
Size 350KB
Sample260810-cwv5zstvbx
SHA256 5de2f02b1c735ca8f5174e538a92a60188252170ee0547f40b8dcf4d916d1b9e
MD5 746d9ba8c40502465def4c8b30509b9d
SHA1 91defebfa913453aa93193b7767e27d3b1a224f9
SHA512 2684f8242ab704df4f0039bd2502e2c532d8022d22935083b5b02c2420574df24c0f6ce14199c95d580e1f418e1a9fa3a7dc31960d9508baae843add01c527f1
SSDEEP 6144:18LjyquSzVwHye6m+cOojc4Txsml+gAa+fvVvd6mY4YIAIACW8:CfyqucwHycZTWjpa+f9xYFIhW8
TLSH
T12A74E05BB79962F9E473823CC9A21A4AF772783107209FDF076443756E272C09E3A761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_746d9ba8c40502465def4c8b30509b9d_cobalt-strike_icedid_njrat_satacom

File Explorer

2026-08-10_746d9ba8c40502465def4c8b30509b9d_cobalt-strike_icedid_njrat_satacom

.exe 350KB

2026-08-10_746d9ba8c40502465def4c8b30509b9d_cobalt-strike_icedid_njrat_satacom

IMPHASH c7d0edaa06a9d230ee68c95e1bdefa8b
SHA256 5de2f02b1c735ca8f5174e538a92a60188252170ee0547f40b8dcf4d916d1b9e
MD5 746d9ba8c40502465def4c8b30509b9d
SHA1 91defebfa913453aa93193b7767e27d3b1a224f9
SHA512 2684f8242ab704df4f0039bd2502e2c532d8022d22935083b5b02c2420574df24c0f6ce14199c95d580e1f418e1a9fa3a7dc31960d9508baae843add01c527f1
SSDEEP 6144:18LjyquSzVwHye6m+cOojc4Txsml+gAa+fvVvd6mY4YIAIACW8:CfyqucwHycZTWjpa+f9xYFIhW8
TLSH
T12A74E05BB79962F9E473823CC9A21A4AF772783107209FDF076443756E272C09E3A761
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22048

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

version

GetFileVersionInfoSizeW

shell32

SHGetFolderPathW

user32

GetSystemMetrics IsWindow GetDC ReleaseDC

gdi32

GetDeviceCaps

kernel32

GetConsoleMode WriteConsoleW HeapSize SetFilePointerEx GetConsoleOutputCP RaiseException RtlAddFunctionTable CreateFileW FlushFileBuffers WriteFile CloseHandle SetUnhandledExceptionFilter GetLastError CreateMutexA GetCurrentProcess GetCurrentProcessId ExitProcess TlsAlloc TlsSetValue TlsFree FlushInstructionCache GetLocalTime VirtualAlloc VirtualProtect VirtualFree GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryA QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RtlPcToFileHeader GetStdHandle TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetFileType HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LoadLibraryExW LCMapStringW GetProcessHeap

Name

.text

Size

100KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata1

Size

190KB

Virtual Size

189KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_746d9ba8c40502465def4c8b30509b9d_cobalt-strike_icedid_njrat_satacom

version

shell32

user32

gdi32

kernel32

generic