2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc

General

Target
2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc
Size 620KB
Sample261002-tx48qaxgrf
SHA256 7ff52b7d9918e9f049d119cf8437bc90c5dc7d032aa65e4c9f7775f96a465a44
MD5 3b37102f10863330a2fe6658cd6058af
SHA1 c2b47dd2650965acffa3b5e72daf30d624a2c094
SHA512 672f7d7bc539c19472d753c4451e3ae48fcbc329007c50615a237c73f516fe01c74a54ecaa28a892df8d1744a7a307f1228c9408bd0d18d6d7e9490e64647583
SSDEEP 6144:qKOEx+/9I7iIPqiSomRTcWbHiddZZSuXx2+4bPKm4+WCTNZil10lAJNxcGUv1ocI:qK+MFSoiTcWbCddgo1Tb2vGcqgp
TLSH
T165D47C56EBE402F9D17BC1B4CA829856EB77B855133065CB03E209675F3B6A05F3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc

.exe 620KB

2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH a1fa2d08960884e06f2dc59bd5f7a43c
SHA256 7ff52b7d9918e9f049d119cf8437bc90c5dc7d032aa65e4c9f7775f96a465a44
MD5 3b37102f10863330a2fe6658cd6058af
SHA1 c2b47dd2650965acffa3b5e72daf30d624a2c094
SHA512 672f7d7bc539c19472d753c4451e3ae48fcbc329007c50615a237c73f516fe01c74a54ecaa28a892df8d1744a7a307f1228c9408bd0d18d6d7e9490e64647583
SSDEEP 6144:qKOEx+/9I7iIPqiSomRTcWbHiddZZSuXx2+4bPKm4+WCTNZil10lAJNxcGUv1ocI:qK+MFSoiTcWbCddgo1Tb2vGcqgp
TLSH
T165D47C56EBE402F9D17BC1B4CA829856EB77B855133065CB03E209675F3B6A05F3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

283424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

MultiByteToWideChar LoadLibraryA GetProcAddress GetCurrentProcess SetEndOfFile QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW Sleep GetCurrentThreadId WideCharToMultiByte GetStringTypeW GetLocaleInfoEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode CloseHandle VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP HeapReAlloc FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW HeapSize WriteConsoleW RtlUnwind

Name

.text

Size

448KB

Virtual Size

448KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

46KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_3b37102f10863330a2fe6658cd6058af_cobalt-strike_icedid_njrat_satacom_stealc

kernel32

generic