2026-07-11_7a844ae11ef206c0d848f8b5a724a294_cobalt-strike_icedid_luca-stealer_njrat_satacom

General

Target
2026-07-11_7a844ae11ef206c0d848f8b5a724a294_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 364KB
Sample260711-e3mtasbw3p
SHA256 af5668a09a766b8069dfcba6ede1ade989d5c1f7066b3944445889188da8ff7f
MD5 7a844ae11ef206c0d848f8b5a724a294
SHA1 f7b31333025a8f9aca295609d665dd05d3417fc1
SHA512 f469806e4ae157e3807afe76cfe6b75ae9137898089cd61f52754347006087bd31f3d86e7cd8cc0fa39254a6df14f46c25b436a978dc588ccac3138f755d3794
SSDEEP 6144:MK0GYZ/Wwp+KlRj0QC1ox/7x0+fOBfa+ZzpFZXRklbWsKAvo:MKo/9++GQC1SjfMa+ZzpfRklb9K4
TLSH
T12D84F11BB3A530F5E1B79638C9600546E772B8764730DBEF07A842662E232D48D7EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_7a844ae11ef206c0d848f8b5a724a294_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-07-11_7a844ae11ef206c0d848f8b5a724a294_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 364KB

2026-07-11_7a844ae11ef206c0d848f8b5a724a294_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH 53b3515b1768b0d5da71af4f1bb0ed63
SHA256 af5668a09a766b8069dfcba6ede1ade989d5c1f7066b3944445889188da8ff7f
MD5 7a844ae11ef206c0d848f8b5a724a294
SHA1 f7b31333025a8f9aca295609d665dd05d3417fc1
SHA512 f469806e4ae157e3807afe76cfe6b75ae9137898089cd61f52754347006087bd31f3d86e7cd8cc0fa39254a6df14f46c25b436a978dc588ccac3138f755d3794
SSDEEP 6144:MK0GYZ/Wwp+KlRj0QC1ox/7x0+fOBfa+ZzpFZXRklbWsKAvo:MKo/9++GQC1SjfMa+ZzpfRklb9K4
TLSH
T12D84F11BB3A530F5E1B79638C9600546E772B8764730DBEF07A842662E232D48D7EF61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLastError WaitForSingleObject CreateThread VirtualAlloc VirtualProtect VirtualFree WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetCommandLineA GetCommandLineW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree LoadLibraryExW CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW

Name

.text

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

232KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_7a844ae11ef206c0d848f8b5a724a294_cobalt-strike_icedid_luca-stealer_njrat_satacom

kernel32

generic