2026-04-09_8639de1014ac3c7230f128ec77d1cd00_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-04-09_8639de1014ac3c7230f128ec77d1cd00_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 355KB
Sample260409-a3a3aahw9t
SHA256 e8bd02f671b2724d44c54babae21b99f6702622def7a26bffabd2c2aded35758
MD5 8639de1014ac3c7230f128ec77d1cd00
SHA1 b417952ee03a292d4084b2dde897b851f25bd926
SHA512 e026f29f8ca0fabee8bfd1005f9526c12021615857b0a7e6ca49e3e234e1d557fe1fc76f0c64e04f91b39be41e15eab65fbd002961ef20cccde95845f39e78a6
SSDEEP 6144:ct1ohH3syj1VZ4P+R4cUT8RBfKEsWfm1G4Y1r:ool3syZVZ42RUYtbm1G4Y
TLSH
T1CA74F443A6EC3CEAD0769274A77743C6D72EFC5502A0C62F02E042969E3F253792A7D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-09_8639de1014ac3c7230f128ec77d1cd00_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-04-09_8639de1014ac3c7230f128ec77d1cd00_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 355KB

2026-04-09_8639de1014ac3c7230f128ec77d1cd00_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 13f3c1e33fd6792e7cb512ddb889dd46
SHA256 e8bd02f671b2724d44c54babae21b99f6702622def7a26bffabd2c2aded35758
MD5 8639de1014ac3c7230f128ec77d1cd00
SHA1 b417952ee03a292d4084b2dde897b851f25bd926
SHA512 e026f29f8ca0fabee8bfd1005f9526c12021615857b0a7e6ca49e3e234e1d557fe1fc76f0c64e04f91b39be41e15eab65fbd002961ef20cccde95845f39e78a6
SSDEEP 6144:ct1ohH3syj1VZ4P+R4cUT8RBfKEsWfm1G4Y1r:ool3syZVZ42RUYtbm1G4Y
TLSH
T1CA74F443A6EC3CEAD0769274A77743C6D72EFC5502A0C62F02E042969E3F253792A7D5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

106740

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLastError Sleep CreateToolhelp32Snapshot Process32FirstW Process32NextW CreateFileW HeapSize ReadConsoleW GetProcessHeap SetStdHandle FreeEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlUnwind ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW WriteConsoleW

shell32

ShellExecuteW

ole32

CoInitializeEx

urlmon

URLDownloadToFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-09_8639de1014ac3c7230f128ec77d1cd00_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

kernel32

shell32

ole32

urlmon

generic