2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 793KB
Sample260601-bfa97sax6v
SHA256 a238bc5891826f1993c3cf7b71aba0d4626eccbf3d1aa999102cbf8004f8b52f
MD5 61862976830f2ff2389136b95445e026
SHA1 c79fb5a0d71e766a625cbdcc06e6d3adef6adc9e
SHA512 c8b04c10ba1b5a5a49a442b2ffe0ccb194480ddf39c3dd7e0fb1350c467daf5e247eff97f272af2f72944948678597cd1062dbaca13bbb14d43c8276b6edba42
SSDEEP 12288:c0klid50LjzpqXuGcC2AwfyLtGhJiwsLDiLqIC5uquSS7nDuoACc:3x0LjAXgCmEw0DiWDuqo7na
TLSH
T11E05BE45B6BD41FDC077A138D956B607EA763809072096DF23E44A6D2F637E07A3B322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 793KB

2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 208defcc1675119b1d6e7a4e84325625
SHA256 a238bc5891826f1993c3cf7b71aba0d4626eccbf3d1aa999102cbf8004f8b52f
MD5 61862976830f2ff2389136b95445e026
SHA1 c79fb5a0d71e766a625cbdcc06e6d3adef6adc9e
SHA512 c8b04c10ba1b5a5a49a442b2ffe0ccb194480ddf39c3dd7e0fb1350c467daf5e247eff97f272af2f72944948678597cd1062dbaca13bbb14d43c8276b6edba42
SSDEEP 12288:c0klid50LjzpqXuGcC2AwfyLtGhJiwsLDiLqIC5uquSS7nDuoACc:3x0LjAXgCmEw0DiWDuqo7na
TLSH
T11E05BE45B6BD41FDC077A138D956B607EA763809072096DF23E44A6D2F637E07A3B322
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

418348

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmExtendFrameIntoClientArea

user32

SetClipboardData DefWindowProcW DispatchMessageA DestroyWindow SetWindowPos CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow GetAsyncKeyState SetWindowLongA SetLayeredWindowAttributes TranslateMessage PeekMessageA PostQuitMessage UpdateWindow GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData

kernel32

SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileSizeEx CloseHandle GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue GetProcessHeap HeapFree HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx WriteFile GetStdHandle MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetCurrentProcess Sleep GetTickCount64 GetCurrentThread ExitProcess GetModuleFileNameW SetStdHandle GetTimeZoneInformation HeapReAlloc CreateFileW HeapSize WriteConsoleW SetEndOfFile FlsAlloc UnhandledExceptionFilter ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent RtlUnwind SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile TerminateProcess GetModuleHandleExW

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

d3dcompiler_47

D3DCompile

Name

.text

Size

611KB

Virtual Size

610KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

146KB

Virtual Size

145KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-01_61862976830f2ff2389136b95445e026_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

d3d11

dwmapi

user32

kernel32

imm32

d3dcompiler_47

generic