2026-08-21_c7bcc164fb4095eb30642f5d44a9db26_cobalt-strike_icedid_satacom

General

Target
2026-08-21_c7bcc164fb4095eb30642f5d44a9db26_cobalt-strike_icedid_satacom
Size 274KB
Sample260821-krlprawgmd
SHA256 c2314b6ce945fc0d8d6b0879959a31bf7e47b5f65efd3ba6db87e60b97b59a50
MD5 c7bcc164fb4095eb30642f5d44a9db26
SHA1 f7da58a67003c9c4ea027f4527ce4fe719f50ab4
SHA512 5b7c591b1617fd8ecf12c612aefd34213dba07f7c59cfae1e907300b4139c153250c3308725acf3eaf68635a2dafc093762346fd6dfcdca1698c4b52cf3c7dfb
SSDEEP 6144:MVKlyesyB5zrlRcg7hJkk2V9H1hEivb/CvQiRksyaqFuBge:MVKsyB5z9ckuH1eivYN4Cj
TLSH
T1B554CF7776A532F5C1A6D239D5118011E7A2F439232993EF5BA482B51F133E0CF78EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-21_c7bcc164fb4095eb30642f5d44a9db26_cobalt-strike_icedid_satacom

File Explorer

2026-08-21_c7bcc164fb4095eb30642f5d44a9db26_cobalt-strike_icedid_satacom

.exe 274KB

2026-08-21_c7bcc164fb4095eb30642f5d44a9db26_cobalt-strike_icedid_satacom

IMPHASH f0a4aa11e4c519491a7646e87a3a72ee
SHA256 c2314b6ce945fc0d8d6b0879959a31bf7e47b5f65efd3ba6db87e60b97b59a50
MD5 c7bcc164fb4095eb30642f5d44a9db26
SHA1 f7da58a67003c9c4ea027f4527ce4fe719f50ab4
SHA512 5b7c591b1617fd8ecf12c612aefd34213dba07f7c59cfae1e907300b4139c153250c3308725acf3eaf68635a2dafc093762346fd6dfcdca1698c4b52cf3c7dfb
SSDEEP 6144:MVKlyesyB5zrlRcg7hJkk2V9H1hEivb/CvQiRksyaqFuBge:MVKsyB5z9ckuH1eivYN4Cj
TLSH
T1B554CF7776A532F5C1A6D239D5118011E7A2F439232993EF5BA482B51F133E0CF78EA2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

19328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadFile GetModuleFileNameA HeapFree VirtualFree VirtualAlloc Sleep CreateFileA LoadLibraryA CloseHandle HeapAlloc GetFileSize GetProcessHeap GetCurrentProcess QueryPerformanceFrequency ExitProcess GetCurrentProcessId QueryPerformanceCounter GetTickCount GetProcAddress MoveFileExA GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter VirtualProtect LoadLibraryExW CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.rsrc

Size

72KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.pdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-21_c7bcc164fb4095eb30642f5d44a9db26_cobalt-strike_icedid_satacom

kernel32

generic