2026-07-06_2fc38b02676f2c929cba581a42ba2c35_cobalt-strike_icedid_luca-stealer_njrat_stealc

General

Target
2026-07-06_2fc38b02676f2c929cba581a42ba2c35_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 165KB
Sample260707-e77n9shy8w
SHA256 d8ee63268f12ae336b73f7a4b2540a82b6d76316b0409259bb6d76f5c5164e26
MD5 2fc38b02676f2c929cba581a42ba2c35
SHA1 066ead2faa0f5d53918063b4b4001bcd11716498
SHA512 c6a90652187e3ae61fc0e7abf64ff0038abdfdd3ea52082ef94128740569ab858c39f22a995a78d5e77fad164b34c8eeb91c4639d32f2649a2c02f16c1624254
SSDEEP 3072:L3XtrzcQgj8WM9hndx4zxk1eWuTwWAv6ig9IRVxAhY:9czj8WTzx4kAkIlP
TLSH
T1F7F38D46B3AA10F9E1778138C9A11606F772B82607609BDF07A447769F337E15D3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-06_2fc38b02676f2c929cba581a42ba2c35_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-06_2fc38b02676f2c929cba581a42ba2c35_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 165KB

2026-07-06_2fc38b02676f2c929cba581a42ba2c35_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 7f5ba9e8e12c8b29be31f9db6d018c65
SHA256 d8ee63268f12ae336b73f7a4b2540a82b6d76316b0409259bb6d76f5c5164e26
MD5 2fc38b02676f2c929cba581a42ba2c35
SHA1 066ead2faa0f5d53918063b4b4001bcd11716498
SHA512 c6a90652187e3ae61fc0e7abf64ff0038abdfdd3ea52082ef94128740569ab858c39f22a995a78d5e77fad164b34c8eeb91c4639d32f2649a2c02f16c1624254
SSDEEP 3072:L3XtrzcQgj8WM9hndx4zxk1eWuTwWAv6ig9IRVxAhY:9czj8WTzx4kAkIlP
TLSH
T1F7F38D46B3AA10F9E1778138C9A11606F772B82607609BDF07A447769F337E15D3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12972

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLastError WaitForSingleObject OpenEventW Sleep CreateRemoteThread OpenProcess VirtualAllocEx WriteProcessMemory OpenFileMappingW MapViewOfFile VirtualFreeEx UnmapViewOfFile GetModuleFileNameA GetModuleHandleA GetProcAddress CreateToolhelp32Snapshot Process32First Process32Next K32EnumProcessModules K32GetModuleBaseNameA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW RtlUnwind

Name

.text

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-06_2fc38b02676f2c929cba581a42ba2c35_cobalt-strike_icedid_luca-stealer_njrat_stealc

kernel32

generic