2026-08-20_e436b7ee25f1f843c0359b8097ae0056_cobalt-strike_icedid_satacom

General

Target
2026-08-20_e436b7ee25f1f843c0359b8097ae0056_cobalt-strike_icedid_satacom
Size 415KB
Sample260820-vesmmsvtfs
SHA256 43b245b65f04454b0226146cb7e5666dd5452393beabf496f2ea0ca895895dec
MD5 e436b7ee25f1f843c0359b8097ae0056
SHA1 f0a72f0c86057640e4f474aa87ff42f1d82888c7
SHA512 28c930ea3a068704a0984f62955d4537422a8889a6bc8387c74129fe36038731babc91bd2012f578516ef5b9136dc442eb8707f6e01dfce26053d5120b08a36d
SSDEEP 12288:Otw8Jz6RDFTwyVq+l1/eeqQCQIzcBQZ/asn:/86jE+l5eemJcB6H
TLSH
T16994BF63695237F4C159E638D5208415F7A2F47C232593EFAAA941B92F037E08F78E92
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-08-20_e436b7ee25f1f843c0359b8097ae0056_cobalt-strike_icedid_satacom

File Explorer

2026-08-20_e436b7ee25f1f843c0359b8097ae0056_cobalt-strike_icedid_satacom

.exe 415KB

2026-08-20_e436b7ee25f1f843c0359b8097ae0056_cobalt-strike_icedid_satacom

IMPHASH f25bfca1f91f16c97c192eb8963c979c
SHA256 43b245b65f04454b0226146cb7e5666dd5452393beabf496f2ea0ca895895dec
MD5 e436b7ee25f1f843c0359b8097ae0056
SHA1 f0a72f0c86057640e4f474aa87ff42f1d82888c7
SHA512 28c930ea3a068704a0984f62955d4537422a8889a6bc8387c74129fe36038731babc91bd2012f578516ef5b9136dc442eb8707f6e01dfce26053d5120b08a36d
SSDEEP 12288:Otw8Jz6RDFTwyVq+l1/eeqQCQIzcBQZ/asn:/86jE+l5eemJcB6H
TLSH
T16994BF63695237F4C159E638D5208415F7A2F47C232593EFAAA941B92F037E08F78E92
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

8a:35:cf:60:d2:4b:05:33:16:48:72:b3:d1:90:d2:00:01:fd:75:ca:54:38:1c:8b:c3:10:6d:a1:9d:ea:f4:0e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

0

Major OS version

6

Entry point

16128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadFile GetModuleFileNameA HeapFree VirtualFree VirtualAlloc Sleep CreateFileA LoadLibraryA CloseHandle HeapAlloc GetFileSize ExitProcess GetProcessHeap GetModuleHandleA GetProcAddress GetModuleHandleW MoveFileExA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW WriteConsoleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_e436b7ee25f1f843c0359b8097ae0056_cobalt-strike_icedid_satacom

PE Signature issue

kernel32

generic