2026-07-04_3e077a14b61bddc5716c4640bcf73b1b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-07-04_3e077a14b61bddc5716c4640bcf73b1b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 160KB
Sample260704-bt2z3set8p
SHA256 92068ede75e5277d8d81c8f376f5d73ba3c3e3d02b43919ebb6d25708e7fab23
MD5 3e077a14b61bddc5716c4640bcf73b1b
SHA1 e1e563f232951f2aa2b4ba1d3716b56776629c9e
SHA512 db0f3a721d21886e661a18382066f796a31f94a1beb8c0e0b9d066705ab9e5e906d1fd05ea7d805353a0258cbb79dae8cfa8747b0b7aaa53ff37c3d10304d8fb
SSDEEP 3072:BEM4gI/KMrOAL3oQuZjSs01jA1YJIfa6+mY6:BEMRIjrOi3HTsYjAUH
TLSH
T148F35C1BB7A524F9E1779278C8911A42F772783507609BDF03A0477A5F232E0AD3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-04_3e077a14b61bddc5716c4640bcf73b1b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-04_3e077a14b61bddc5716c4640bcf73b1b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 160KB

2026-07-04_3e077a14b61bddc5716c4640bcf73b1b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 5af472074cf4aff525851e8445f8e9bf
SHA256 92068ede75e5277d8d81c8f376f5d73ba3c3e3d02b43919ebb6d25708e7fab23
MD5 3e077a14b61bddc5716c4640bcf73b1b
SHA1 e1e563f232951f2aa2b4ba1d3716b56776629c9e
SHA512 db0f3a721d21886e661a18382066f796a31f94a1beb8c0e0b9d066705ab9e5e906d1fd05ea7d805353a0258cbb79dae8cfa8747b0b7aaa53ff37c3d10304d8fb
SSDEEP 3072:BEM4gI/KMrOAL3oQuZjSs01jA1YJIfa6+mY6:BEMRIjrOi3HTsYjAUH
TLSH
T148F35C1BB7A524F9E1779278C8911A42F772783507609BDF03A0477A5F232E0AD3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

connect freeaddrinfo getaddrinfo WSAStartup socket setsockopt send recv closesocket

shell32

ShellExecuteA SHGetFolderPathA

advapi32

GetUserNameA

kernel32

CreateFileW GetConsoleMode GetConsoleOutputCP FlushFileBuffers WriteConsoleW HeapSize SetFilePointerEx GetProcessHeap HeapReAlloc CreateFileA DeleteFileA GetFileSize ReadFile WriteFile GetTempPathA GetVolumeInformationA CloseHandle GetLastError InitializeCriticalSection EnterCriticalSection LeaveCriticalSection CreateMutexA Sleep CreateThread GetTickCount VirtualAlloc VirtualFree GetModuleFileNameA GetModuleHandleA GetProcAddress CopyFileA MoveFileA MoveFileExA GetComputerNameA QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess GetStringTypeW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-04_3e077a14b61bddc5716c4640bcf73b1b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

ws2_32

shell32

advapi32

kernel32

generic