2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 1.7MB
Sample260713-ah2phaas9m
SHA256 de56156dd3e1b4a720ac9257d07fe88e4db5d3fd075a0cc54d306cc0dd951352
MD5 009f89818fdc90f9395919863f978358
SHA1 9cfdea15e2e477f0b769e917b5c72b30a869440c
SHA512 272b1a629f605565e61015760afe88ff05d4550e3b41fd7f824bdca0d72fca59b51cf775380a9baa2e258ff312f903d0b8760e7d3395451d5b66c1d8eef875f0
SSDEEP 49152:4xAeKfx1lEL7t7CwYiefrCSHlr4jnaDruYrJptyPu:4xdD1CwY1nhLsu
TLSH
T1DB859ED65FC041B8C2B6C13C97B9ABA2D6A13D494F29BEFB019583D652B60D0A77C331
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 1.7MB

2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH af9b8a9152bd859c622833a150205fef
SHA256 de56156dd3e1b4a720ac9257d07fe88e4db5d3fd075a0cc54d306cc0dd951352
MD5 009f89818fdc90f9395919863f978358
SHA1 9cfdea15e2e477f0b769e917b5c72b30a869440c
SHA512 272b1a629f605565e61015760afe88ff05d4550e3b41fd7f824bdca0d72fca59b51cf775380a9baa2e258ff312f903d0b8760e7d3395451d5b66c1d8eef875f0
SSDEEP 49152:4xAeKfx1lEL7t7CwYiefrCSHlr4jnaDruYrJptyPu:4xdD1CwY1nhLsu
TLSH
T1DB859ED65FC041B8C2B6C13C97B9ABA2D6A13D494F29BEFB019583D652B60D0A77C331
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1297052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Sleep GetModuleHandleA GetProcAddress SetEndOfFile ReleaseSRWLockExclusive AcquireSRWLockExclusive LoadLibraryW GetProcessHeap GetCurrentProcess InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetModuleFileNameW GetLastError HeapReAlloc GetThreadContext SetThreadContext GetSystemDirectoryW FreeLibrary CloseHandle WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetConsoleCP ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode WideCharToMultiByte CreateFileW SetConsoleMode GetNumberOfConsoleInputEvents ReadConsoleInputW PeekConsoleInputA ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW SetFilePointerEx ReadFile GetFileSizeEx HeapSize WriteConsoleW

user32

wsprintfW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-12_009f89818fdc90f9395919863f978358_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

generic