2026-11-01_bd9833ad876aab665c3fedc789b0ce75_cobalt-strike_icedid_satacom

General

Target
2026-11-01_bd9833ad876aab665c3fedc789b0ce75_cobalt-strike_icedid_satacom
Size 208KB
Sample261102-l549paa16p
SHA256 79badbc1d0a4597618973b1c41ae29178711601b74a6a074ccd47c52e0917bbc
MD5 bd9833ad876aab665c3fedc789b0ce75
SHA1 1ffc93fd18b8b57b8002e7116114277d3bd6ac0a
SHA512 a30cbba3ecc998ed6d39c812ca78965c428324ce822d45cab5dfda84cbc951c5319104271e7c64017ee9e2de52bbf2271ff12f029b33f46ac3f3b79c06841727
SSDEEP 6144:Ta9DUEDQPjMSL0ue/ZvzGB4iHmEPb36xP2P:OSyQPjMSL0uwZv/e6xO
TLSH
T15D248C8522A23CF8ED75C27588350B10CB6FB83256519FAF015006C55EDAAD63E3DFEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_bd9833ad876aab665c3fedc789b0ce75_cobalt-strike_icedid_satacom

File Explorer

2026-11-01_bd9833ad876aab665c3fedc789b0ce75_cobalt-strike_icedid_satacom

.exe 208KB

2026-11-01_bd9833ad876aab665c3fedc789b0ce75_cobalt-strike_icedid_satacom

IMPHASH fc85a7dcef9955816f8808847110461e
SHA256 79badbc1d0a4597618973b1c41ae29178711601b74a6a074ccd47c52e0917bbc
MD5 bd9833ad876aab665c3fedc789b0ce75
SHA1 1ffc93fd18b8b57b8002e7116114277d3bd6ac0a
SHA512 a30cbba3ecc998ed6d39c812ca78965c428324ce822d45cab5dfda84cbc951c5319104271e7c64017ee9e2de52bbf2271ff12f029b33f46ac3f3b79c06841727
SSDEEP 6144:Ta9DUEDQPjMSL0ue/ZvzGB4iHmEPb36xP2P:OSyQPjMSL0uwZv/e6xO
TLSH
T15D248C8522A23CF8ED75C27588350B10CB6FB83256519FAF015006C55EDAAD63E3DFEA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

MessageBoxW

kernel32

HeapFree WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry RaiseException GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW CloseHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_bd9833ad876aab665c3fedc789b0ce75_cobalt-strike_icedid_satacom

user32

kernel32

generic