2026-05-29_2d8915e7dd71914fa65cf350382cbdb9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-29_2d8915e7dd71914fa65cf350382cbdb9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 796KB
Sample260529-b2ymmahs7w
SHA256 a9b42fc6f6235ce6cd66b798e780da091d847fd4c6009a4802fde2300c99017b
MD5 2d8915e7dd71914fa65cf350382cbdb9
SHA1 b19c4b609b90b97440a8adb26aa837ea7825e966
SHA512 7f47fde8fbc90990033787e0fd7d9d084a444281027b524dd2e5a4cdbdd69f561b7f8dada806be097c8513c490b0b9891cd61ce4ad3688c3802e20a84f3c2d53
SSDEEP 12288:90n+dXZSjjZGmCSJrjX6rqqFrJwRUFGnzf1P0hGAlTsOns6wlnQQo/da:SqSjj0SJX6r6zf1PcGoTsllnH
TLSH
T13E05BF45B6F901F9C033A138D956B607EA767C09072096DF23E44A6D2F637E07A7B722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-29_2d8915e7dd71914fa65cf350382cbdb9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-05-29_2d8915e7dd71914fa65cf350382cbdb9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 796KB

2026-05-29_2d8915e7dd71914fa65cf350382cbdb9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 23d320de56545ae0afb4f67992c4fec3
SHA256 a9b42fc6f6235ce6cd66b798e780da091d847fd4c6009a4802fde2300c99017b
MD5 2d8915e7dd71914fa65cf350382cbdb9
SHA1 b19c4b609b90b97440a8adb26aa837ea7825e966
SHA512 7f47fde8fbc90990033787e0fd7d9d084a444281027b524dd2e5a4cdbdd69f561b7f8dada806be097c8513c490b0b9891cd61ce4ad3688c3802e20a84f3c2d53
SSDEEP 12288:90n+dXZSjjZGmCSJrjX6rqqFrJwRUFGnzf1P0hGAlTsOns6wlnQQo/da:SqSjj0SJX6r6zf1PcGoTsllnH
TLSH
T13E05BF45B6F901F9C033A138D956B607EA767C09072096DF23E44A6D2F637E07A7B722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

420948

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

user32

SetClipboardData GetWindowThreadProcessId DefWindowProcW DispatchMessageA DestroyWindow SetWindowPos CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow IsWindow GetAsyncKeyState EnumWindows SetLayeredWindowAttributes TranslateMessage PeekMessageA PostQuitMessage UpdateWindow GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData

kernel32

SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose CloseHandle GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetProcessHeap HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx WriteFile GetStdHandle GetModuleFileNameW GetModuleHandleExW MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetCurrentProcess GetTickCount64 GetCurrentThread ExitProcess GetFileSizeEx TerminateProcess SetStdHandle GetTimeZoneInformation HeapReAlloc CreateFileW HeapSize WriteConsoleW SetEndOfFile HeapFree IsDebuggerPresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

d3dcompiler_47

D3DCompile

Name

.text

Size

614KB

Virtual Size

613KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-29_2d8915e7dd71914fa65cf350382cbdb9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

d3d11

user32

kernel32

imm32

d3dcompiler_47

generic