adaptixc2 | 2026-08-15_fc62c5a25dad099984a37110a389b6df_cobalt-strike_icedid_satacom

General

Target
2026-08-15_fc62c5a25dad099984a37110a389b6df_cobalt-strike_icedid_satacom
Size 216KB
Sample260815-mdtjjsfb53
SHA256 baed57b5c2baf199ebc7cbbbd90e2fb476c90554efb686cee5f6b995a493ca13
MD5 fc62c5a25dad099984a37110a389b6df
SHA1 02821c9fc290732cb6aebff116bd20dd8ea42ba5
SHA512 8027f4c75eed0e2ea42f89a28785895d5632a98b1bf2b2f899509e313a5c8ee7e79a105b9c30e27648ef4140ec9b3dba90dfe20dda21522ea76ae009393287ba
SSDEEP 3072:4TtqeHIp9bIQ7cayFS1frdPqXFPMtTPA8eDws+AP8mwntQskEnoTpMRU:WIpZIvoJpaIs6ntEEno1kU
TLSH
T107240A3AD6F28468E06BE1389B839463BAF07C184730679B4790D7117F27DB85B7A790
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

trojan backdoor rat adaptixc2

Malware Config

Extracted

Family

adaptixc2

Signatures

Family: AdaptixC2
AdaptixC2 is an open-source C2 framework written in C++.
rat trojan backdoor adaptixc2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_fc62c5a25dad099984a37110a389b6df_cobalt-strike_icedid_satacom

File Explorer

2026-08-15_fc62c5a25dad099984a37110a389b6df_cobalt-strike_icedid_satacom

.exe 216KB

2026-08-15_fc62c5a25dad099984a37110a389b6df_cobalt-strike_icedid_satacom

IMPHASH 5187b2e57f7a277444830175ea2e2b94
SHA256 baed57b5c2baf199ebc7cbbbd90e2fb476c90554efb686cee5f6b995a493ca13
MD5 fc62c5a25dad099984a37110a389b6df
SHA1 02821c9fc290732cb6aebff116bd20dd8ea42ba5
SHA512 8027f4c75eed0e2ea42f89a28785895d5632a98b1bf2b2f899509e313a5c8ee7e79a105b9c30e27648ef4140ec9b3dba90dfe20dda21522ea76ae009393287ba
SSDEEP 3072:4TtqeHIp9bIQ7cayFS1frdPqXFPMtTPA8eDws+AP8mwntQskEnoTpMRU:WIpZIvoJpaIs6ntEEno1kU
TLSH
T107240A3AD6F28468E06BE1389B839463BAF07C184730679B4790D7117F27DB85B7A790
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

CryptAcquireContextW CryptReleaseContext CryptDeriveKey CryptDestroyKey CryptSetKeyParam CryptDecrypt CryptCreateHash CryptHashData CryptDestroyHash

kernel32

CloseHandle WaitForSingleObject CreateThread VirtualFree GetLastError CreateMutexA ExitProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

55KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

114KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

2026-08-15_fc62c5a25dad099984a37110a389b6df_cobalt-strike_icedid_satacom

advapi32

kernel32

generic