2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_njrat_rhadamanthys_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_njrat_rhadamanthys_satacom_vidar
Size 4.0MB
Sample260529-te53asf13s
SHA256 a4d9a48a91e68796c365604bcfceb2fd8f98c1703f028fb30df95f9a37a15887
MD5 cd5eb654e081972e465ac305a6907089
SHA1 c0270fe24757e12107e1a3ae3141a0a34d39f7b5
SHA512 aa8f2860c794e2a8a34167be3e2babedbfe88bdd5cb55c8ce2c24ce17a4eef58a5565237e459f54019b3309b992ce48bb850fbe2dddf0cd84d83eb41c6b68302
SSDEEP 98304:rXiV2VaIabjKoh9WhceUJF3noxDtOg0rr6:+V2VO32Nw+
TLSH
T10E166D212A608975C41BD2716596E69DD1737C60CF724F8F33857EBEFFB26901A22232
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_njrat_rhadamanthys_satacom_vidar

File Explorer

2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_njrat_rhadamanthys_satacom_vidar

.exe 4.0MB

2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_njrat_rhadamanthys_satacom_vidar

IMPHASH b12d4a6c16cf27542a84814bb0e6f8ba
SHA256 a4d9a48a91e68796c365604bcfceb2fd8f98c1703f028fb30df95f9a37a15887
MD5 cd5eb654e081972e465ac305a6907089
SHA1 c0270fe24757e12107e1a3ae3141a0a34d39f7b5
SHA512 aa8f2860c794e2a8a34167be3e2babedbfe88bdd5cb55c8ce2c24ce17a4eef58a5565237e459f54019b3309b992ce48bb850fbe2dddf0cd84d83eb41c6b68302
SSDEEP 98304:rXiV2VaIabjKoh9WhceUJF3noxDtOg0rr6:+V2VO32Nw+
TLSH
T10E166D212A608975C41BD2716596E69DD1737C60CF724F8F33857EBEFFB26901A22232
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31100

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

comctl32

InitCommonControlsEx

kernel32

GlobalLock FlushFileBuffers WriteConsoleW SetStdHandle OutputDebugStringW HeapReAlloc LoadLibraryExW LCMapStringW SetFilePointerEx GetConsoleMode GetConsoleCP LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile GetModuleFileNameW DeleteCriticalSection GetFileType GetStdHandle GetProcessHeap RtlUnwindEx HeapSize GetModuleHandleExW ExitProcess WideCharToMultiByte GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree GetLastError RaiseException RtlPcToFileHeader HeapAlloc GetCommandLineW DecodePointer CloseHandle VirtualFreeEx ReadProcessMemory VirtualAllocEx OpenProcess GlobalUnlock CreateFileW GlobalAlloc FreeLibrary GetProcAddress GetModuleHandleW MulDiv MultiByteToWideChar GetCurrentThreadId IsDebuggerPresent IsProcessorFeaturePresent EncodePointer

user32

GetClassNameW SendMessageTimeoutW AttachThreadInput GetWindowThreadProcessId GetWindowLongPtrW GetParent SendMessageW GetCursor GetDesktopWindow RedrawWindow GetWindowDC IsWindow GetWindow ChildWindowFromPointEx ClientToScreen EnumChildWindows GetWindowTextW GetDlgCtrlID GetWindowLongW GetForegroundWindow WindowFromPoint CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ReleaseCapture SendDlgItemMessageW SetCapture SetCursor EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DefWindowProcW MessageBoxW DestroyWindow KillTimer PostQuitMessage GetWindowPlacement RegisterClassExW LoadIconW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW SetTimer GetClientRect SetWindowTextW SetWindowPos GetMenu CheckMenuItem LoadCursorW LoadImageW RegisterWindowMessageW RegisterHotKey CreateWindowExW DestroyIcon ReleaseDC GetDC GetCursorPos IsWindowVisible ShowWindow EnableWindow MoveWindow ScreenToClient GetWindowRect InvalidateRect

gdi32

DeleteDC BitBlt LineTo MoveToEx StretchBlt PatBlt CreateCompatibleBitmap CreateCompatibleDC Rectangle SetROP2 GetStockObject SelectObject CreatePen GetPixel DeleteObject CreateFontW

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-29_cd5eb654e081972e465ac305a6907089_cobalt-strike_fabookie_hijackloader_luca-stealer_maze_njrat_rhadamanthys_satacom_vidar

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

generic