2026-10-22_300b80499a2274756c87bdcd47d86fb6_cobalt-strike_icedid_satacom_stealc

General

Target
2026-10-22_300b80499a2274756c87bdcd47d86fb6_cobalt-strike_icedid_satacom_stealc
Size 4.1MB
Sample261024-v7v88sfd72
SHA256 2b9b83e660a8217dad59a2698615f9278161fbc21c2db21a0ef1946c340651a0
MD5 300b80499a2274756c87bdcd47d86fb6
SHA1 6c727cbeb27d515a81473f1b692e489e62e58d9a
SHA512 bc006d4d11a6554d6ec9cb22b51ca15a06176f59ab00a15408f676fc720c0f560b3cf135540670662224b71c4f6935d9714f57c74e6ffd4d02ee843fcf856386
SSDEEP 98304:1Ugk0TTffj8lTbq/Susd/hQbaOJI3JdZe7UntlfTnNyqh5X:1UKTD7OSdsRhIapdyUvjv
TLSH
T11D1623A669B5549BE7B58938C641BD05DE623DE367E0F6C74340ACC70B13AE85A3F320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_300b80499a2274756c87bdcd47d86fb6_cobalt-strike_icedid_satacom_stealc

File Explorer

2026-10-22_300b80499a2274756c87bdcd47d86fb6_cobalt-strike_icedid_satacom_stealc

.exe 4.1MB

2026-10-22_300b80499a2274756c87bdcd47d86fb6_cobalt-strike_icedid_satacom_stealc

IMPHASH 809b2324dfa00e045aac94d68d17c8ce
SHA256 2b9b83e660a8217dad59a2698615f9278161fbc21c2db21a0ef1946c340651a0
MD5 300b80499a2274756c87bdcd47d86fb6
SHA1 6c727cbeb27d515a81473f1b692e489e62e58d9a
SHA512 bc006d4d11a6554d6ec9cb22b51ca15a06176f59ab00a15408f676fc720c0f560b3cf135540670662224b71c4f6935d9714f57c74e6ffd4d02ee843fcf856386
SSDEEP 98304:1Ugk0TTffj8lTbq/Susd/hQbaOJI3JdZe7UntlfTnNyqh5X:1UKTD7OSdsRhIapdyUvjv
TLSH
T11D1623A669B5549BE7B58938C641BD05DE623DE367E0F6C74340ACC70B13AE85A3F320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

60000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

TranslateMessage LoadCursorA EnumChildWindows MessageBoxW SetWindowTextW UpdateWindow ShowWindow CreateWindowExW RegisterClassW PostQuitMessage DefWindowProcW SendMessageW DispatchMessageW GetMessageW

gdi32

SetBkMode SetBkColor DeleteObject CreateSolidBrush CreateFontW SetTextColor

comdlg32

GetOpenFileNameW GetSaveFileNameW

kernel32

GetCommandLineW GetCommandLineA GetEnvironmentStringsW FindFirstFileExW FindClose FreeEnvironmentStringsW GetProcessHeap SetStdHandle WriteConsoleW HeapSize SetEndOfFile FindNextFileW CreateFileW SetFilePointerEx CloseHandle GetModuleFileNameW GetModuleHandleA GetProcAddress LoadLibraryA CopyFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte LCMapStringEx GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx RtlUnwind GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetStdHandle WriteFile HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc VirtualProtect LoadLibraryExW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc

Name

.text

Size

164KB

Virtual Size

163KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

72KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_300b80499a2274756c87bdcd47d86fb6_cobalt-strike_icedid_satacom_stealc

user32

gdi32

comdlg32

kernel32

generic