2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 5.7MB
Sample260708-eqcskabs5m
SHA256 cf0031983c6403f498131423edb809378c615fd65d50cf353baa04e53ce9338c
MD5 da7dac4bd67b06f3105a3ef170e50bbc
SHA1 a8f3c7971df0544b705e8424cc9aab711471a920
SHA512 53373d0c70f31d3a08b50085b262f5afdc693016496fa47b59cfc25dc3e62b96fe71557f17184e02849f95ee7661e2154e6b40ae5eeebd8fdfeeb2c014305ec6
SSDEEP 98304:0jysHjgk1+0aA91L775WtNBlLO03A7eh/:0jNHjgk1+0as1LXktdK0wK/
TLSH
T186569D1BB69901ECE12BA03885576A0BD2767409233063EF639555613FEBBE07BBF305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 5.7MB

2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 125f3dfbf6abebc0d4ba0054e4d8e347
SHA256 cf0031983c6403f498131423edb809378c615fd65d50cf353baa04e53ce9338c
MD5 da7dac4bd67b06f3105a3ef170e50bbc
SHA1 a8f3c7971df0544b705e8424cc9aab711471a920
SHA512 53373d0c70f31d3a08b50085b262f5afdc693016496fa47b59cfc25dc3e62b96fe71557f17184e02849f95ee7661e2154e6b40ae5eeebd8fdfeeb2c014305ec6
SSDEEP 98304:0jysHjgk1+0aA91L775WtNBlLO03A7eh/:0jNHjgk1+0as1LXktdK0wK/
TLSH
T186569D1BB69901ECE12BA03885576A0BD2767409233063EF639555613FEBBE07BBF305
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Game_X_Lv\source\repos\new chams free fire\x64\Release\new chams free fire.pdb

kernel32

GetLastError Process32NextW LockResource DeleteFileW Process32FirstW CloseHandle LoadResource FindResourceW Beep GetProcAddress VirtualAllocEx ExitProcess GetExitCodeThread CopyFileW CreateRemoteThread QueryFullProcessImageNameW VirtualFreeEx InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW SetUnhandledExceptionFilter CreateToolhelp32Snapshot OpenProcess GetModuleHandleA GetFileAttributesW CreateFileW WaitForSingleObject CreateDirectoryW Sleep FindClose GetModuleFileNameW RemoveDirectoryW WriteFile GetCurrentProcess FindNextFileW WriteProcessMemory FindFirstFileW SizeofResource GetModuleHandleW

user32

SetWindowTextW GetWindowLongPtrW ShowWindow DispatchMessageW SendMessageW TrackMouseEvent SetFocus TranslateMessage keybd_event CreateWindowExW RegisterClassW FillRect FindWindowExW SetForegroundWindow GetWindowThreadProcessId GetMessageW DefWindowProcW PostMessageW GetClientRect DrawTextW PostQuitMessage GetParent InvalidateRect BeginPaint EndPaint GetWindowTextW LoadCursorW PtInRect

gdi32

GetStockObject SetTextColor SelectObject SetBkMode CreatePen Rectangle SetBkColor DeleteObject CreateFontW CreateSolidBrush

advapi32

OpenProcessToken GetTokenInformation

shell32

SHGetFolderPathW ShellExecuteExW

msvcp140

_Cnd_do_broadcast_at_thread_exit ?_Xlength_error@std@@YAXPEBD@Z ?_Throw_Cpp_error@std@@YAXH@Z _Thrd_detach

comctl32

ord413 ord410 ord412

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memset __C_specific_handler memcpy __current_exception __current_exception_context memcmp _CxxThrowException __std_exception_copy __std_exception_destroy

api-ms-win-crt-stdio-l1-1-0

__p__commode __stdio_common_vswprintf_s _set_fmode

api-ms-win-crt-runtime-l1-1-0

_set_app_type _get_narrow_winmain_command_line _initterm exit _exit _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback _crt_atexit _beginthreadex terminate _register_onexit_function _initialize_onexit_table _cexit _initterm_e _configure_narrow_argv _initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

free _callnewh _set_new_mode malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

wcslen

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-08_da7dac4bd67b06f3105a3ef170e50bbc_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

gdi32

advapi32

shell32

msvcp140

comctl32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

generic