2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc

General

Target
2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc
Size 619KB
Sample261027-n5by9add66
SHA256 6cfeb6a2d6c0d4e3371da4fec171093b538e7b7565b52561029595b19f44b862
MD5 8fc91e8b2dbb3dc7076350f4b5a182b1
SHA1 319b214d947fc48310f9034a193faf8f9c1d64dd
SHA512 b91a5771fd941a638a95807971d791862fb79eb5573c867533c106da20c45b3bddab970443953d5f9f11f31db085fed69d18a80d4d9c577f99987f9a9c95dca0
SSDEEP 6144:K3DQ73r/dI7LI+iix8/mRlR2InxCcMHSOX/revKmY+WCTNZil10lAJtxcGUvVoc9:yDc7Mx8/ilR2IxCYo1T72vmcpXjg
TLSH
T1EBD46C16E7A502F9C47BC3B4CAC29856EA767815533266CB03E229725F376B0533EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc

File Explorer

2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc

.exe 619KB

2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc

IMPHASH a1fa2d08960884e06f2dc59bd5f7a43c
SHA256 6cfeb6a2d6c0d4e3371da4fec171093b538e7b7565b52561029595b19f44b862
MD5 8fc91e8b2dbb3dc7076350f4b5a182b1
SHA1 319b214d947fc48310f9034a193faf8f9c1d64dd
SHA512 b91a5771fd941a638a95807971d791862fb79eb5573c867533c106da20c45b3bddab970443953d5f9f11f31db085fed69d18a80d4d9c577f99987f9a9c95dca0
SSDEEP 6144:K3DQ73r/dI7LI+iix8/mRlR2InxCcMHSOX/revKmY+WCTNZil10lAJtxcGUvVoc9:yDc7Mx8/ilR2IxCYo1T72vmcpXjg
TLSH
T1EBD46C16E7A502F9C47BC3B4CAC29856EA767815533266CB03E229725F376B0533EB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

283424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

MultiByteToWideChar LoadLibraryA GetProcAddress GetCurrentProcess SetEndOfFile QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW Sleep GetCurrentThreadId WideCharToMultiByte GetStringTypeW GetLocaleInfoEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode CloseHandle VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW GetTimeZoneInformation IsValidCodePage GetACP GetOEMCP HeapReAlloc FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle CreateFileW HeapSize WriteConsoleW RtlUnwind

Name

.text

Size

448KB

Virtual Size

452KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

46KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-26_8fc91e8b2dbb3dc7076350f4b5a182b1_cobalt-strike_icedid_njrat_satacom_stealc

kernel32

generic