2026-06-30_8d25dee7c163f902ebacb73fa08fa769_cobalt-strike_icedid_luca-stealer_njrat_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-06-30_8d25dee7c163f902ebacb73fa08fa769_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 507KB
Sample260701-egbtxafy2x
SHA256 3ff9401d2fe829745f1c7e87d2dbfa24d0224ddeb3202e7974e8b59ee408911e
MD5 8d25dee7c163f902ebacb73fa08fa769
SHA1 10e1426ee6564d41a24f0011eb0e3cef0a1680d3
SHA512 80a3c727c0e4e304715e50aa4642d35f2cfccc0daec8a4283795c7c81cb421ddcaf7947d8b8f8883bc210ec2eb47523c501ebe8f3632401745eec349d79b8615
SSDEEP 6144:ZLR7TeIZV2+F44Oo4VqA98OpUeoZHMGuRXC1a2NNXgimn6uQX7V0D:vfbZQk4wAaOpy9MZCTNiimn6vB0D
TLSH
T197B49D45F2F446F8D07791388993660BF975384907208BDF23F846692FA37E856BB722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-06-30_8d25dee7c163f902ebacb73fa08fa769_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-06-30_8d25dee7c163f902ebacb73fa08fa769_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 507KB

2026-06-30_8d25dee7c163f902ebacb73fa08fa769_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH d71dc9c706a6a67b1ba82b4c2b3cb56d
SHA256 3ff9401d2fe829745f1c7e87d2dbfa24d0224ddeb3202e7974e8b59ee408911e
MD5 8d25dee7c163f902ebacb73fa08fa769
SHA1 10e1426ee6564d41a24f0011eb0e3cef0a1680d3
SHA512 80a3c727c0e4e304715e50aa4642d35f2cfccc0daec8a4283795c7c81cb421ddcaf7947d8b8f8883bc210ec2eb47523c501ebe8f3632401745eec349d79b8615
SSDEEP 6144:ZLR7TeIZV2+F44Oo4VqA98OpUeoZHMGuRXC1a2NNXgimn6uQX7V0D:vfbZQk4wAaOpy9MZCTNiimn6vB0D
TLSH
T197B49D45F2F446F8D07791388993660BF975384907208BDF23F846692FA37E856BB722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentThreadId CreateToolhelp32Snapshot Sleep LoadLibraryA CloseHandle VirtualProtectEx GetProcAddress VirtualAllocEx ReadProcessMemory VirtualFreeEx GetExitCodeProcess SizeofResource GetCurrentProcess OpenProcess GetLastError Process32NextW LockResource Process32FirstW LoadResource FindResourceW GetModuleHandleW IsWow64Process GetCurrentProcessId RtlAddFunctionTable CreateRemoteThread WriteProcessMemory GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter QueryPerformanceCounter

advapi32

AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception _CxxThrowException memset __std_exception_destroy memcpy __C_specific_handler __current_exception_context __std_exception_copy memmove

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __acrt_iob_func __p__commode _set_fmode

api-ms-win-crt-heap-l1-1-0

malloc free _set_new_mode _callnewh

api-ms-win-crt-string-l1-1-0

_wcsicmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e __p___argc __p___wargv _cexit _c_exit _initterm _get_initial_wide_environment _initialize_wide_environment _exit _initialize_onexit_table _register_onexit_function _crt_atexit terminate _configure_wide_argv _set_app_type _seh_filter_exe system exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

2026-06-30_8d25dee7c163f902ebacb73fa08fa769_cobalt-strike_icedid_luca-stealer_njrat_satacom

kernel32

advapi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

generic