2026-10-22_f6c9f33d014c2dad0c66c10bdde7055f_cobalt-strike_icedid_njrat_satacom

General

Target
2026-10-22_f6c9f33d014c2dad0c66c10bdde7055f_cobalt-strike_icedid_njrat_satacom
Size 999KB
Sample261023-b5mdrsv1ht
SHA256 c537b816ef1789d6f4c67c631a088a4398987f38ce6a976a8ffe95e7cfb5000e
MD5 f6c9f33d014c2dad0c66c10bdde7055f
SHA1 fc8db0ce2372c59b6df5d2ee3c6e761df721ae41
SHA512 515034d5ee0d6f3d81507db432214d7256c6a8baa0e0b42af31759d3159fad90593c9a07e34ad21276890afa31dab4afc8b01498d60c693bbfb244508316c141
SSDEEP 24576:9XcA40K1judZFB28KqXbs1qqjLVLrYQqh:pcL1jO/GrYQ
TLSH
T17B258D16A2A412E5E07FD13E8E97B4A3D5677C3517706FC742E402512BE3AE30A3E726
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_f6c9f33d014c2dad0c66c10bdde7055f_cobalt-strike_icedid_njrat_satacom

File Explorer

2026-10-22_f6c9f33d014c2dad0c66c10bdde7055f_cobalt-strike_icedid_njrat_satacom

.exe 999KB

2026-10-22_f6c9f33d014c2dad0c66c10bdde7055f_cobalt-strike_icedid_njrat_satacom

IMPHASH 58f30147a37659e03cdf727685dccfc1
SHA256 c537b816ef1789d6f4c67c631a088a4398987f38ce6a976a8ffe95e7cfb5000e
MD5 f6c9f33d014c2dad0c66c10bdde7055f
SHA1 fc8db0ce2372c59b6df5d2ee3c6e761df721ae41
SHA512 515034d5ee0d6f3d81507db432214d7256c6a8baa0e0b42af31759d3159fad90593c9a07e34ad21276890afa31dab4afc8b01498d60c693bbfb244508316c141
SSDEEP 24576:9XcA40K1judZFB28KqXbs1qqjLVLrYQqh:pcL1jO/GrYQ
TLSH
T17B258D16A2A412E5E07FD13E8E97B4A3D5677C3517706FC742E402512BE3AE30A3E726
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

11472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GlobalMemoryStatusEx GetSystemInfo MultiByteToWideChar AllocConsole WriteConsoleW SetEndOfFile ReadConsoleW IsDebuggerPresent RaiseException WideCharToMultiByte QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList RtlPcToFileHeader GetModuleFileNameW LoadLibraryExW SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer GetStdHandle WriteFile GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind UnhandledExceptionFilter GetTempPathW IsThreadAFiber VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetCurrentThread OutputDebugStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW SetConsoleCtrlHandler FlushFileBuffers GetConsoleOutputCP GetConsoleMode CloseHandle CreateFileW GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc ReadFile RtlUnwind

user32

MessageBoxA

Name

.text

Size

456KB

Virtual Size

455KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

430KB

Virtual Size

435KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_f6c9f33d014c2dad0c66c10bdde7055f_cobalt-strike_icedid_njrat_satacom

kernel32

user32

generic