2026-10-16_a47a3fbbec366a9a9a4c345561dacbd9_cobalt-strike_icedid_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_a47a3fbbec366a9a9a4c345561dacbd9_cobalt-strike_icedid_njrat_satacom_stealc
Size 778KB
Sample261017-malpjadx9x
SHA256 0a1c9e256328368917d6284303cfc38cede87df6312c86b4d7f4a66dd0110b6f
MD5 a47a3fbbec366a9a9a4c345561dacbd9
SHA1 e787f25760ff8e774f6ed57b493ffdc350b4bded
SHA512 57eeb918d0011395193a94f662167d2502c1324a660c29fe74cc2f015f892c9d88d562e0c322549008c067c69728f0ad9e6b24e95f1eac00e634fa5bd1c1d48f
SSDEEP 12288:vFbmn1JF682U4PjTKcvaJs5RXUirDyzUCbDV/ygvsnjoha4eywMgx40:FmDF681WjecAs5R7rDyzRVjvsnjF4
TLSH
T16F05AF55F2A800FCE07BD175D956BA07EA367809032069DF23E45A693F736E01EBB712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_a47a3fbbec366a9a9a4c345561dacbd9_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-10-16_a47a3fbbec366a9a9a4c345561dacbd9_cobalt-strike_icedid_njrat_satacom_stealc

.exe 778KB

2026-10-16_a47a3fbbec366a9a9a4c345561dacbd9_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH 81e2417ba006f43a0c814a981bf06703
SHA256 0a1c9e256328368917d6284303cfc38cede87df6312c86b4d7f4a66dd0110b6f
MD5 a47a3fbbec366a9a9a4c345561dacbd9
SHA1 e787f25760ff8e774f6ed57b493ffdc350b4bded
SHA512 57eeb918d0011395193a94f662167d2502c1324a660c29fe74cc2f015f892c9d88d562e0c322549008c067c69728f0ad9e6b24e95f1eac00e634fa5bd1c1d48f
SSDEEP 12288:vFbmn1JF682U4PjTKcvaJs5RXUirDyzUCbDV/ygvsnjoha4eywMgx40:FmDF681WjecAs5R7rDyzRVjvsnjF4
TLSH
T16F05AF55F2A800FCE07BD175D956BA07EA367809032069DF23E45A693F736E01EBB712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

447376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmSetWindowAttribute

user32

TranslateMessage SetProcessDPIAware ScreenToClient ClientToScreen SetCursor SetCursorPos IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetDpiForSystem LoadCursorW GetWindowThreadProcessId FindWindowW SetWindowLongPtrW GetWindowLongPtrW PtInRect FillRect GetCursorPos GetWindowRect GetClientRect InvalidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow GetSystemMetrics GetAsyncKeyState IsWindowVisible SetWindowDisplayAffinity SetWindowPos SetLayeredWindowAttributes ShowWindow DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW PostQuitMessage DefWindowProcW PeekMessageW DispatchMessageW

gdi32

DeleteObject GetStockObject CreateSolidBrush CreatePen TextOutW Rectangle CreateFontW SetTextColor SetBkMode SelectObject

shell32

ShellExecuteA

d3dcompiler_47

D3DCompile

kernel32

FindClose SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers LCMapStringW LoadLibraryExW VirtualProtect HeapAlloc GetFileType HeapFree UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext WriteFile GetStdHandle GetModuleFileNameW TerminateProcess ExitProcess IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap EnterCriticalSection EncodePointer SetStdHandle GetStringTypeW GetEnvironmentVariableA CreateDirectoryA CreateFileW GetFileSizeEx ReadFile CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject CreateMutexW SetWaitableTimer CreateWaitableTimerExW Sleep GetCurrentProcess SetThreadPriority SetPriorityClass OpenProcess GetLocalTime GetTickCount VirtualAllocEx VirtualProtectEx ReadProcessMemory WriteProcessMemory MoveFileExA MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW GlobalUnlock GlobalLock GlobalFree VerSetConditionMask FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryA GetLocaleInfoA WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead FlsFree HeapSize HeapReAlloc SetEndOfFile WriteConsoleW GlobalAlloc RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

Name

.text

Size

592KB

Virtual Size

592KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

151KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-16_a47a3fbbec366a9a9a4c345561dacbd9_cobalt-strike_icedid_njrat_satacom_stealc

d3d11

dwmapi

user32

gdi32

shell32

d3dcompiler_47

kernel32

imm32

generic