2026-07-01_48fda20a0fbdfc3819b6a5e34ede2676_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-07-01_48fda20a0fbdfc3819b6a5e34ede2676_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 1.2MB
Sample260701-ly3saaa15l
SHA256 35868f8861a5bd9342798cbff67ff80170d0957c2eeba7e35a8c352a4824a2f7
MD5 48fda20a0fbdfc3819b6a5e34ede2676
SHA1 b440dd8ccd450b512be89d9afe36a7623ba991cd
SHA512 819d5452412916cc1d6a9b80d28c04504e0cd7cee76f115a4dd518b8b1da5adfbecd9842b6493ed6185ca4f502b5b0f361e3f17d263a17a2cd69f0bc5541d0e3
SSDEEP 24576:/mNVl6hvkJpJD1K/xo38L6P+aTnR+tLvOwOK0AY2KxM:0lUvQDAo34kR0Lm+0S
TLSH
T1EC456AE95DF447C4D511DA71B060C728B33AA160B9905BCE70AFFB613FA24E0EA74E61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-01_48fda20a0fbdfc3819b6a5e34ede2676_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-07-01_48fda20a0fbdfc3819b6a5e34ede2676_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 1.2MB

2026-07-01_48fda20a0fbdfc3819b6a5e34ede2676_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 5ab139608a66fbdb147ec707447a5501
SHA256 35868f8861a5bd9342798cbff67ff80170d0957c2eeba7e35a8c352a4824a2f7
MD5 48fda20a0fbdfc3819b6a5e34ede2676
SHA1 b440dd8ccd450b512be89d9afe36a7623ba991cd
SHA512 819d5452412916cc1d6a9b80d28c04504e0cd7cee76f115a4dd518b8b1da5adfbecd9842b6493ed6185ca4f502b5b0f361e3f17d263a17a2cd69f0bc5541d0e3
SSDEEP 24576:/mNVl6hvkJpJD1K/xo38L6P+aTnR+tLvOwOK0AY2KxM:0lUvQDAo34kR0Lm+0S
TLSH
T1EC456AE95DF447C4D511DA71B060C728B33AA160B9905BCE70AFFB613FA24E0EA74E61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

8648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

ShellExecuteA

kernel32

GetCommandLineW WriteConsoleW CreateDirectoryA GetTempPathA GetCurrentProcessId GetTickCount FreeLibrary GetModuleFileNameA LoadLibraryExA LoadResource LockResource SizeofResource EnumResourceNamesA FindResourceA EnumResourceTypesA BeginUpdateResourceA UpdateResourceA EndUpdateResourceA AllocConsole RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetEndOfFile RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetCommandLineA ReadFile GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType CloseHandle GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleOutputCP GetFileSizeEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers CreateFileW HeapSize HeapReAlloc

Name

.text

Size

99KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-01_48fda20a0fbdfc3819b6a5e34ede2676_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic