2026-11-03_66dee3f547772cdf8a37d26de64efad6_cobalt-strike_icedid_satacom

General

Target
2026-11-03_66dee3f547772cdf8a37d26de64efad6_cobalt-strike_icedid_satacom
Size 2.3MB
Sample261104-w2b4vatwez
SHA256 997199100ad3a0d64a1a6746173efb10c0ab0d1093269127c8321bcbf5304aac
MD5 66dee3f547772cdf8a37d26de64efad6
SHA1 b99884b7e46e7b12a87810e8e2b7cfb68c9b8f69
SHA512 3a70eaa8962d0047d298abdf96768914eb33378a7157b91790823d652b11f66481005bf564e958904727ac01ceed4737bd64b918acae3857d1ad7c34d8085ba2
SSDEEP 24576:Zu/mAEL+H8ZaUGNM0Y4WlBjV1SQNaRbh/cHv5c3t9WDujMJSbyv8naO3/42Fmv:Z5A+7srK0Y4qKQg1CPq3t8Dv4Tmv
TLSH
T180B523D316BA28D5C61642B450691A45C7FEFC719B1097EFC74CAA1A0DB3BC08D3AF62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_66dee3f547772cdf8a37d26de64efad6_cobalt-strike_icedid_satacom

File Explorer

2026-11-03_66dee3f547772cdf8a37d26de64efad6_cobalt-strike_icedid_satacom

.exe 2.3MB

2026-11-03_66dee3f547772cdf8a37d26de64efad6_cobalt-strike_icedid_satacom

IMPHASH 1f42c25185f36749d98a27820a7376e5
SHA256 997199100ad3a0d64a1a6746173efb10c0ab0d1093269127c8321bcbf5304aac
MD5 66dee3f547772cdf8a37d26de64efad6
SHA1 b99884b7e46e7b12a87810e8e2b7cfb68c9b8f69
SHA512 3a70eaa8962d0047d298abdf96768914eb33378a7157b91790823d652b11f66481005bf564e958904727ac01ceed4737bd64b918acae3857d1ad7c34d8085ba2
SSDEEP 24576:Zu/mAEL+H8ZaUGNM0Y4WlBjV1SQNaRbh/cHv5c3t9WDujMJSbyv8naO3/42Fmv:Z5A+7srK0Y4qKQg1CPq3t8Dv4Tmv
TLSH
T180B523D316BA28D5C61642B450691A45C7FEFC719B1097EFC74CAA1A0DB3BC08D3AF62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rustc_main-d50c7f24d8b20c1b.pdb

rustc_driver-58995fd3f1c8ecc6

_RNvCspy2N7xwqd2_17rustc_driver_impl4main _RNvNtCscx1ptWZUqVR_3std2rt19lang_start_internal

ntdll

RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx RtlCaptureContext RtlVirtualUnwind

kernel32

UnhandledExceptionFilter SetFilePointerEx WriteConsoleW CloseHandle CreateFileW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer RaiseException GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent IsDebuggerPresent HeapSize HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetProcessHeap

Name

.text

Size

56KB

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

UPX1

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_66dee3f547772cdf8a37d26de64efad6_cobalt-strike_icedid_satacom

rustc_driver-58995fd3f1c8ecc6

ntdll

kernel32

generic