2026-07-05_655036aed66399e3bf1b44c5dfaeac05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_655036aed66399e3bf1b44c5dfaeac05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 253KB
Sample260705-tlehxsdx51
SHA256 947af9aaf060990af6481db8d265fa739c21a9edeae56bd5281807c7792e0e09
MD5 655036aed66399e3bf1b44c5dfaeac05
SHA1 c827bc207e55bc9548f9037ff8af276c0c1fc35e
SHA512 63c7ebdb230c65107cd8913f6ca007a1be44ce385cbf9d3c44cf4f8a6efef983cd5f77d5ec0a2656b18609ab73efafc641e1d525d995b6e6937c6e43894285bf
SSDEEP 3072:qbbGOtg9R53JxVl3/eLfMMepP/v6CjLKulVDC/AL/kxBIU1wrYBJHGLETUYu:qb9q3JxPveYbXLlUKYkYBJgLYu
TLSH
T148446C5AA6A408FCECB7D17EC9A14A06E772BC460730D6DF03A052671F276D19D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_655036aed66399e3bf1b44c5dfaeac05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-07-05_655036aed66399e3bf1b44c5dfaeac05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 253KB

2026-07-05_655036aed66399e3bf1b44c5dfaeac05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 6e70df31f999de56dfd98baf0710a732
SHA256 947af9aaf060990af6481db8d265fa739c21a9edeae56bd5281807c7792e0e09
MD5 655036aed66399e3bf1b44c5dfaeac05
SHA1 c827bc207e55bc9548f9037ff8af276c0c1fc35e
SHA512 63c7ebdb230c65107cd8913f6ca007a1be44ce385cbf9d3c44cf4f8a6efef983cd5f77d5ec0a2656b18609ab73efafc641e1d525d995b6e6937c6e43894285bf
SSDEEP 3072:qbbGOtg9R53JxVl3/eLfMMepP/v6CjLKulVDC/AL/kxBIU1wrYBJHGLETUYu:qb9q3JxPveYbXLlUKYkYBJgLYu
TLSH
T148446C5AA6A408FCECB7D17EC9A14A06E772BC460730D6DF03A052671F276D19D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

71396

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

sendto htons inet_ntoa WSACleanup closesocket inet_pton WSAStartup inet_addr socket setsockopt

iphlpapi

GetAdaptersInfo

advapi32

InitiateSystemShutdownExW OpenProcessToken RegSetValueExW RegCloseKey AdjustTokenPrivileges LookupPrivilegeValueW RegOpenKeyExW

user32

EndPaint BeginPaint SetForegroundWindow DefWindowProcW SendMessageTimeoutW MessageBoxW EnumChildWindows FillRect CreateWindowExW GetSystemMetrics SetWindowTextW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW EnumWindows TranslateMessage FindWindowW LoadCursorW GetClassNameW GetClientRect DrawTextW SystemParametersInfoW UpdateWindow

urlmon

URLDownloadToFileW

gdi32

CreateSolidBrush DeleteObject SetBkMode SetTextColor CreateFontW SelectObject

kernel32

SetEnvironmentVariableW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP GetStringTypeW IsValidCodePage FindFirstFileExW GetFileSizeEx GetConsoleMode GetConsoleOutputCP GetFileType LCMapStringW CompareStringW LoadLibraryExW VirtualProtect HeapFree HeapSize HeapReAlloc WriteConsoleW GetACP ReleaseSRWLockExclusive GetVolumeInformationW FindFirstFileW WriteProcessMemory FindFirstVolumeW FindNextFileW GetCurrentProcess WriteFile DeviceIoControl GetModuleFileNameW SetErrorMode GetEnvironmentVariableW GetTempPathW CreateMutexW FindClose WaitForSingleObject CreateFileW GetFileAttributesW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot Sleep SetVolumeLabelW GetLastError Process32NextW Process32FirstW CloseHandle VirtualProtectEx SetFilePointerEx MoveFileExW ReadProcessMemory FindVolumeClose CreateProcessW GetModuleHandleW FindNextVolumeW GetTickCount GetDriveTypeW VirtualQueryEx FlushFileBuffers QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimePreciseAsFileTime AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId WaitForSingleObjectEx GetExitCodeThread WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead HeapAlloc RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection CreateThread ExitThread FreeLibrary FreeLibraryAndExitThread GetModuleHandleExW IsProcessorFeaturePresent ExitProcess TerminateProcess GetProcAddress GetStdHandle GetCommandLineA GetCommandLineW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter

Name

.text

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

65KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-05_655036aed66399e3bf1b44c5dfaeac05_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

ws2_32

iphlpapi

advapi32

user32

urlmon

gdi32

kernel32

generic