2026-07-05_fc3e0fd2d1eb5cb0dc7a3224185b5de4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_fc3e0fd2d1eb5cb0dc7a3224185b5de4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 243KB
Sample260705-bc2yrabv2n
SHA256 3e35e0af5e3bfc226c71f8091f11decbb85e21167bce779aac85bc93b960d2cc
MD5 fc3e0fd2d1eb5cb0dc7a3224185b5de4
SHA1 bb6340f2d5adcd5439f989f5df4b5e21dd8c42b8
SHA512 1515990b155b0df690d5f93389fc71d98affac527c20185154dba4ac8c4788bfaa0421f702c4ca3671a33c47466cb68907b15fdc68179a9d58f363912caeea5c
SSDEEP 3072:1KDOV+z3BX3BZ/MUybPBXOcuexKhwtrr6lQnojw6l9DK/VuDiYEpIv/jd+6:1KDOV+jBgpDBXjuGZFVViv/s6
TLSH
T11D349D06B2E408FDE5B79179CEA11902E37378450771DADF03A08266EF27AD5AD3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_fc3e0fd2d1eb5cb0dc7a3224185b5de4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-07-05_fc3e0fd2d1eb5cb0dc7a3224185b5de4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 243KB

2026-07-05_fc3e0fd2d1eb5cb0dc7a3224185b5de4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 1758e260ded34c72fac00a3f2c45d5cb
SHA256 3e35e0af5e3bfc226c71f8091f11decbb85e21167bce779aac85bc93b960d2cc
MD5 fc3e0fd2d1eb5cb0dc7a3224185b5de4
SHA1 bb6340f2d5adcd5439f989f5df4b5e21dd8c42b8
SHA512 1515990b155b0df690d5f93389fc71d98affac527c20185154dba4ac8c4788bfaa0421f702c4ca3671a33c47466cb68907b15fdc68179a9d58f363912caeea5c
SSDEEP 3072:1KDOV+z3BX3BZ/MUybPBXOcuexKhwtrr6lQnojw6l9DK/VuDiYEpIv/jd+6:1KDOV+jBgpDBXjuGZFVViv/s6
TLSH
T11D349D06B2E408FDE5B79179CEA11902E37378450771DADF03A08266EF27AD5AD3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57668

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Sleep OpenProcess GetModuleFileNameW LocalFree MoveFileExW MultiByteToWideChar WriteConsoleW HeapReAlloc HeapSize GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetStdHandle WaitForSingleObject FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage SetFilePointerEx GetStringTypeW LCMapStringW GetLastError CloseHandle WriteFile ReadFile CreateFileW DeleteFileW GetProcessHeap GetCommandLineW LoadLibraryExW VirtualProtect GetFileType HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetStdHandle TerminateProcess ExitProcess GetCurrentProcess GetCPInfo IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread FreeLibrary ExitThread CreateThread GetCurrentThreadId FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetModuleHandleW GetProcAddress GetFileInformationByHandleEx WideCharToMultiByte QueryPerformanceCounter GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection

user32

GetMessageW TranslateMessage DispatchMessageW SendMessageW PostMessageW DefWindowProcW PostQuitMessage RegisterClassExW CreateWindowExW ShowWindow GetDlgItem GetDlgCtrlID SetFocus GetSystemMetrics UpdateWindow BeginPaint EndPaint SetWindowTextW GetClientRect FillRect LoadImageW LoadCursorW MessageBoxW AdjustWindowRect

gdi32

SetBkColor DeleteObject CreateSolidBrush CreateFontW SetTextColor

comctl32

InitCommonControlsEx

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders

bcrypt

BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash

dwmapi

DwmSetWindowAttribute

shlwapi

PathRemoveFileSpecW

shell32

CommandLineToArgvW ShellExecuteExW

Name

.text

Size

140KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_fc3e0fd2d1eb5cb0dc7a3224185b5de4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

kernel32

user32

gdi32

comctl32

winhttp

bcrypt

dwmapi

shlwapi

shell32

generic