2026-08-16_a8ed3be93fd622b0d9f28c08c101a250_cobalt-strike_icedid_satacom

General

Target
2026-08-16_a8ed3be93fd622b0d9f28c08c101a250_cobalt-strike_icedid_satacom
Size 105KB
Sample260816-ejba6azvgz
SHA256 3aaaacad3ac0d20f674efe8414e78d6264a15d78856256e84a32b4263d5a3cca
MD5 a8ed3be93fd622b0d9f28c08c101a250
SHA1 4565c1446b76f430ea8308e4eeb5f550b42917ee
SHA512 5c240fd67ae95e52b62643d9b5de25e5051602359a31583f2a9bf2c8e748fc77f1535e21be28310a750e84cd91833371818b3a7c54f6a45529da31c22069a2da
SSDEEP 3072:nyCLatvahrIFPhixZEp8H/7otrO0LV4G7bac++++9o/f:nNahahYixZo8HjgVn++++9o/
TLSH
T105B35A5B63E930F8E1BB8278C4914A56D772B83217609FEF07A4465A1F236E18D3DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-16_a8ed3be93fd622b0d9f28c08c101a250_cobalt-strike_icedid_satacom

File Explorer

2026-08-16_a8ed3be93fd622b0d9f28c08c101a250_cobalt-strike_icedid_satacom

.exe 105KB

2026-08-16_a8ed3be93fd622b0d9f28c08c101a250_cobalt-strike_icedid_satacom

IMPHASH a1256ae45954774350c46222566ba01b
SHA256 3aaaacad3ac0d20f674efe8414e78d6264a15d78856256e84a32b4263d5a3cca
MD5 a8ed3be93fd622b0d9f28c08c101a250
SHA1 4565c1446b76f430ea8308e4eeb5f550b42917ee
SHA512 5c240fd67ae95e52b62643d9b5de25e5051602359a31583f2a9bf2c8e748fc77f1535e21be28310a750e84cd91833371818b3a7c54f6a45529da31c22069a2da
SSDEEP 3072:nyCLatvahrIFPhixZEp8H/7otrO0LV4G7bac++++9o/f:nNahahYixZo8HjgVn++++9o/
TLSH
T105B35A5B63E930F8E1BB8278C4914A56D772B83217609FEF07A4465A1F236E18D3DF21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6420

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

TerminateProcess ResumeThread CloseHandle ExitProcess GetThreadContext WriteProcessMemory HeapFree InitializeProcThreadAttributeList OpenProcess CreateToolhelp32Snapshot UpdateProcThreadAttribute Process32NextW Process32FirstW DeleteProcThreadAttributeList HeapAlloc VirtualProtectEx VirtualAllocEx GetProcessHeap CreateProcessW VirtualFreeEx SetThreadContext WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-16_a8ed3be93fd622b0d9f28c08c101a250_cobalt-strike_icedid_satacom

kernel32

generic