2026-08-30_dbdf2ebaf739d6f08def24ce50747207_cobalt-strike_icedid_njrat_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-30_dbdf2ebaf739d6f08def24ce50747207_cobalt-strike_icedid_njrat_satacom
Size 556KB
Sample260831-dkj41sed94
SHA256 5d8773c8b34308339f01d06d40b627b9846079ca0a8dc21e51472b5192e34cec
MD5 dbdf2ebaf739d6f08def24ce50747207
SHA1 3f6bf2e1122aa034f871f405eda4a42afe3954b3
SHA512 9de6ba519172cc49f0fbc76b97745c1ed095363fa4761fde6867045ed9fea8308e027850f02bcb39992fee4aed76d16c0aad1325473f75285f6d255392a07486
SSDEEP 12288:yB5XU6hMNDP7gyI8a8X1TMZaGgx8YXi7oljVgoZ2d8j:yBK6iNYV8a8lTMZaGA8YXiUjx
TLSH
T13CC46C16775118B1E0A6923BDD928213E576F0050390EAD737E84779DF22BE0AFBAF11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-30_dbdf2ebaf739d6f08def24ce50747207_cobalt-strike_icedid_njrat_satacom

File Explorer

2026-08-30_dbdf2ebaf739d6f08def24ce50747207_cobalt-strike_icedid_njrat_satacom

.exe 556KB

2026-08-30_dbdf2ebaf739d6f08def24ce50747207_cobalt-strike_icedid_njrat_satacom

IMPHASH 06a9984ce4ec595d3e332dbe6a60da03
SHA256 5d8773c8b34308339f01d06d40b627b9846079ca0a8dc21e51472b5192e34cec
MD5 dbdf2ebaf739d6f08def24ce50747207
SHA1 3f6bf2e1122aa034f871f405eda4a42afe3954b3
SHA512 9de6ba519172cc49f0fbc76b97745c1ed095363fa4761fde6867045ed9fea8308e027850f02bcb39992fee4aed76d16c0aad1325473f75285f6d255392a07486
SSDEEP 12288:yB5XU6hMNDP7gyI8a8X1TMZaGgx8YXi7oljVgoZ2d8j:yBK6iNYV8a8lTMZaGA8YXiUjx
TLSH
T13CC46C16775118B1E0A6923BDD928213E576F0050390EAD737E84779DF22BE0AFBAF11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

111712

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\dev\vulkan-va-zero-copy\bin\Release\VulkanVaZeroCopy.pdb

vulkan-1

vkGetPhysicalDeviceDisplayPropertiesKHR vkCreateSwapchainKHR vkCreateDisplayPlaneSurfaceKHR vkGetPhysicalDeviceProperties2 vkEnumerateInstanceExtensionProperties vkCreateComputePipelines vkCreateImage vkEnumerateDeviceExtensionProperties vkCreateDescriptorPool vkCmdPipelineBarrier vkAcquireNextImageKHR vkEnumeratePhysicalDevices vkGetSwapchainImagesKHR vkCreateHeadlessSurfaceEXT vkGetPhysicalDeviceSurfacePresentModesKHR vkCreateDescriptorSetLayout vkCmdCopyImage vkCmdBindPipeline vkCreatePipelineLayout vkAllocateCommandBuffers vkGetPhysicalDeviceSurfaceCapabilitiesKHR vkGetPhysicalDeviceDisplayPlanePropertiesKHR vkQueuePresentKHR vkGetDeviceQueue vkGetPhysicalDeviceQueueFamilyProperties vkBindBufferMemory vkAllocateMemory vkQueueWaitIdle vkResetCommandPool vkCreateCommandPool vkUpdateDescriptorSets vkGetDisplayPlaneSupportedDisplaysKHR vkGetDisplayPlaneCapabilitiesKHR vkGetDisplayModePropertiesKHR vkGetPhysicalDeviceSurfaceSupportKHR vkCreateBuffer vkEndCommandBuffer vkUnmapMemory vkGetPhysicalDeviceMemoryProperties vkCmdPushConstants vkCmdBindDescriptorSets vkCreateDevice vkBindImageMemory vkCmdDispatch vkCreateImageView vkGetPhysicalDeviceSurfaceFormatsKHR vkCmdCopyBufferToImage vkCreateShaderModule vkBeginCommandBuffer vkMapMemory vkAllocateDescriptorSets vkCreateSemaphore vkGetBufferMemoryRequirements vkWaitForFences vkCreateFence vkResetFences vkGetDeviceProcAddr vkQueueSubmit vkGetImageMemoryRequirements vkGetInstanceProcAddr vkCreateInstance

d3d12

ord101

dxgi

CreateDXGIFactory2

kernel32

FlsFree RtlUnwind GetSystemTime InitializeCriticalSection GetEnvironmentVariableA LoadLibraryA WriteConsoleW SetEndOfFile HeapReAlloc HeapSize GetTimeZoneInformation FlushFileBuffers GetProcessHeap GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose SetStdHandle MultiByteToWideChar GetFullPathNameW GetCurrentDirectoryW GetConsoleOutputCP ReadConsoleW GetConsoleMode LCMapStringW CompareStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc SetFilePointerEx GetFileSizeEx UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetCommandLineW GetCommandLineA GetModuleFileNameW WriteFile GetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW CreateFileW ReadFile IsProcessorFeaturePresent GetProcAddress GetModuleHandleExW FreeLibrary TerminateProcess ExitProcess GetCurrentProcess WaitForSingleObject CloseHandle FormatMessageA CreateEventA GetLastError GetModuleHandleW WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue GetFileAttributesExW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader

user32

UpdateWindow PostQuitMessage GetClientRect DefWindowProcW CreateWindowExW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW TranslateMessage LoadCursorW

Name

.text

Size

347KB

Virtual Size

346KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

186KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-30_dbdf2ebaf739d6f08def24ce50747207_cobalt-strike_icedid_njrat_satacom

vulkan-1

d3d12

dxgi

kernel32

user32

generic