2026-07-11_5ebc34048937bcb41cb49db20befb444_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-07-11_5ebc34048937bcb41cb49db20befb444_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 247KB
Sample260711-e662cabx2k
SHA256 2bb2a270e1a9da3e8b2a9e1a857fc67f89f3997f55ff9aa967f8cbe09e97557a
MD5 5ebc34048937bcb41cb49db20befb444
SHA1 cc394565ff905b59b6520dbce22b1d2c4fd8eac6
SHA512 d90dec51a725c0dbf17acdfd86418571fd254b2640c3a93a2e3eb30c61949cc7b47352acc51ce491699a1d820b15aa88fbd7a14c6bf93c391f4a577a9e8bbb6e
SSDEEP 3072:IOtZZnf5W3Cl/yHtu3hWLgNS3rTK50aqdpzL2lF91EpkyL63/z3Nz+oloaya:3L83Cl/203hSgN2TKyd92r9hPzdtVya
TLSH
T17C443A0AB6A998F5D4B2D639C54225BAF6B17C058371D3CF03903A27AF336E1D939391
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_5ebc34048937bcb41cb49db20befb444_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-11_5ebc34048937bcb41cb49db20befb444_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 247KB

2026-07-11_5ebc34048937bcb41cb49db20befb444_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 96f0a629988571a51f50bbbdf2805812
SHA256 2bb2a270e1a9da3e8b2a9e1a857fc67f89f3997f55ff9aa967f8cbe09e97557a
MD5 5ebc34048937bcb41cb49db20befb444
SHA1 cc394565ff905b59b6520dbce22b1d2c4fd8eac6
SHA512 d90dec51a725c0dbf17acdfd86418571fd254b2640c3a93a2e3eb30c61949cc7b47352acc51ce491699a1d820b15aa88fbd7a14c6bf93c391f4a577a9e8bbb6e
SSDEEP 3072:IOtZZnf5W3Cl/yHtu3hWLgNS3rTK50aqdpzL2lF91EpkyL63/z3Nz+oloaya:3L83Cl/203hSgN2TKyd92r9hPzdtVya
TLSH
T17C443A0AB6A998F5D4B2D639C54225BAF6B17C058371D3CF03903A27AF336E1D939391
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

42996

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

ReadProcessMemory WriteProcessMemory GetModuleHandleA GetProcAddress CreateToolhelp32Snapshot VirtualProtectEx Process32Next WriteConsoleW CreateFileW HeapReAlloc HeapSize VirtualAllocEx GetTickCount64 OpenProcess CreateRemoteThread Sleep WaitForSingleObject GetLastError Process32First CloseHandle SetFilePointerEx GetFileSizeEx ReadConsoleW ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW SetStdHandle RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW RtlUnwind

user32

GetAsyncKeyState SendInput

advapi32

RegSetValueExA RegQueryValueExA RegOpenKeyExW RegOpenKeyExA RegDeleteKeyA RegCreateKeyExA RegCloseKey RegSetValueExW

ws2_32

socket WSAGetLastError recv connect closesocket WSAStartup WSACleanup freeaddrinfo getaddrinfo send

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_5ebc34048937bcb41cb49db20befb444_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

advapi32

ws2_32

generic