2026-07-11_b9a3b46b67df3c1e9828e163529455e0_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-11_b9a3b46b67df3c1e9828e163529455e0_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar
Size 3.0MB
Sample260711-mngmqsas21
SHA256 060fec7d5b0d721c40d2488b1f1a3be660a39779fa24cf3d5c07edea22110c6a
MD5 b9a3b46b67df3c1e9828e163529455e0
SHA1 58d53629b92d23700983e90774345e68cbb5b13e
SHA512 b24ca2bbbc384739685a838943af2a4480026d9f4e98d99abcd33d39e067144e1a0b53ec4bc557b37325e500426035f5498b3c6b3b6869a652f5a658c00bccb7
SSDEEP 24576:WbfbqM4YskoVVtE4i0ZJp0Rsivg+6h55H863IXSHaPccCHr4ztqvsf7jPYHmZ:WCHFVdDZDfivg+6h+SHaLCHAtGsT8HU
TLSH
T19EE5080673F807D9F1F34B7849766A5598B6BCA9DA10C39F1561710E0E32B988C72B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-11_b9a3b46b67df3c1e9828e163529455e0_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar

File Explorer

2026-07-11_b9a3b46b67df3c1e9828e163529455e0_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar

.exe 3.0MB

2026-07-11_b9a3b46b67df3c1e9828e163529455e0_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar

IMPHASH 7a40f2a78f3f558e5281628feeee6e93
SHA256 060fec7d5b0d721c40d2488b1f1a3be660a39779fa24cf3d5c07edea22110c6a
MD5 b9a3b46b67df3c1e9828e163529455e0
SHA1 58d53629b92d23700983e90774345e68cbb5b13e
SHA512 b24ca2bbbc384739685a838943af2a4480026d9f4e98d99abcd33d39e067144e1a0b53ec4bc557b37325e500426035f5498b3c6b3b6869a652f5a658c00bccb7
SSDEEP 24576:WbfbqM4YskoVVtE4i0ZJp0Rsivg+6h55H863IXSHaPccCHr4ztqvsf7jPYHmZ:WCHFVdDZDfivg+6h+SHaLCHAtGsT8HU
TLSH
T19EE5080673F807D9F1F34B7849766A5598B6BCA9DA10C39F1561710E0E32B988C72B3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

176672

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\unikey\win-unikey\Release\UniKey.pdb

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegSetValueExW RegQueryValueExW RegOpenKeyExW CryptAcquireContextW CryptReleaseContext CryptDestroyKey CryptCreateHash CryptHashData CryptDestroyHash CryptVerifySignatureW RegCloseKey RegCreateKeyExW RegDeleteValueW

comctl32

InitCommonControlsEx

wininet

InternetOpenW HttpQueryInfoW InternetSetStatusCallbackW InternetReadFileExW InternetOpenUrlW InternetCloseHandle

crypt32

CertFreeCertificateContext CertCreateCertificateContext CryptImportPublicKeyInfo

kernel32

GlobalSize GlobalUnlock GlobalLock GlobalFree GetTempFileNameW GetTempPathW Sleep LoadResource LockResource SizeofResource FindResourceW FreeLibrary LoadLibraryW LoadLibraryExA VirtualQuery VirtualProtect GetSystemInfo WriteConsoleW SetEndOfFile HeapSize GetTimeZoneInformation HeapReAlloc OutputDebugStringW SetConsoleCtrlHandler GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileAttributesExW FlushFileBuffers SetStdHandle MoveFileExW GetFileSizeEx GetConsoleOutputCP SetFilePointerEx ReadConsoleW GetConsoleMode ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType HeapAlloc HeapFree GlobalAlloc GetStdHandle ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList InterlockedPushEntrySList RtlUnwindEx RtlPcToFileHeader GetCPInfo CompareStringEx GetStringTypeW LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx LocalFree InitializeCriticalSectionEx FormatMessageA InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry GetModuleHandleW GetModuleFileNameW WaitForSingleObject GetCurrentProcessId GetVersionExW GetLastError CloseHandle WriteFile DeleteFileW CreateFileW RtlCaptureContext MultiByteToWideChar GetModuleFileNameA QueryFullProcessImageNameA OpenProcess DeleteCriticalSection LeaveCriticalSection RaiseException EnterCriticalSection InitializeCriticalSection GlobalReAlloc RtlUnwind GetFileAttributesW GetEnvironmentVariableW MulDiv WideCharToMultiByte GetCurrentThread GetProcAddress

user32

CallNextHookEx SetWinEventHook UnhookWinEvent UnhookWindowsHookEx SetWindowsHookExA GetWindowThreadProcessId GetClassNameA GetForegroundWindow MapVirtualKeyA SendInput keybd_event EndDialog DialogBoxParamW CreateDialogParamW CreateWindowExW KillTimer SetTimer SetMenuDefaultItem CheckMenuItem IsClipboardFormatAvailable EmptyClipboard RegisterClipboardFormatW GetClipboardData SetClipboardData GetClipboardOwner CloseClipboard OpenClipboard LoadBitmapW GetMenuItemInfoW TrackPopupMenu ModifyMenuW GetMenuItemCount GetMenuItemID GetSubMenu DestroyMenu GetMenuState GetMenuStringW LoadMenuW IsDialogMessageW LoadIconW FindWindowW GetCursorPos MessageBeep MessageBoxA SetForegroundWindow UpdateWindow GetMenuDefaultItem GetGUIThreadInfo IsWindow RegisterClassExW PostQuitMessage PostThreadMessageW PostMessageW DispatchMessageW TranslateMessage GetMessageW RegisterWindowMessageW GetSysColor SetCursor SetFocus AppendMenuW GetSystemMenu EnableWindow GetFocus GetDlgCtrlID DestroyWindow LoadStringW GetDesktopWindow IntersectRect ScreenToClient GetWindowRect SetWindowTextW IsWindowVisible SetWindowPos ShowWindow MessageBoxW DestroyIcon SetWindowLongPtrW GetWindowLongPtrW GetWindowLongW InflateRect DrawFocusRect GetClientRect GetWindowTextW InvalidateRect DrawStateW GetSystemMetrics CallWindowProcW DefWindowProcW DrawFrameControl LoadImageW DestroyCursor GetWindow GetTopWindow ReleaseDC GetDC SendDlgItemMessageW GetDlgItem SendMessageW BringWindowToTop GetKeyboardLayout GetMessageA DispatchMessageA GetMessageExtraInfo PostMessageA GetKeyState GetKeyboardState ToAsciiEx

gdi32

DeleteDC GetObjectW GetDeviceCaps SetBkColor ExtTextOutW BitBlt CreateCompatibleDC SetBkMode CreateSolidBrush CreateFontIndirectW EnumFontFamiliesExW SetTextColor SelectObject Rectangle GetTextExtentPoint32W GetStockObject DeleteObject

shell32

ShellExecuteW SetCurrentProcessExplicitAppUserModelID Shell_NotifyIconW

ole32

PropVariantClear CoTaskMemAlloc CoInitialize CoCreateInstance

imm32

ImmAssociateContext ImmSetCompositionStringW ImmSetOpenStatus ImmReleaseContext ImmCreateContext ImmGetContext

Name

.text

Size

929KB

Virtual Size

929KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

847KB

Virtual Size

846KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

minATL

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-11_b9a3b46b67df3c1e9828e163529455e0_cobalt-strike_icedid_luca-stealer_njrat_stealc_vidar

comdlg32

advapi32

comctl32

wininet

crypt32

kernel32

user32

gdi32

shell32

ole32

imm32

generic