2026-07-19_6b2525af3a2709f1c390a7e1d595ed90_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-07-19_6b2525af3a2709f1c390a7e1d595ed90_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 392KB
Sample260719-183ycsgy21
SHA256 ed0b4c39118b5deda76318d38c5c66593514a3294ad9b995c27fd41d7f589253
MD5 6b2525af3a2709f1c390a7e1d595ed90
SHA1 4666be85b836bbf139fb33f05539be37823a7265
SHA512 02a82bfdfc24f4935d3dc9ea38a267f07cbde60326f4ca6e09a23ccbee34ed688fc38c4e3610e3e3f453df7cee1bf1ebb6500466c12ad62b6b464479f1d7f4d6
SSDEEP 6144:jmJGgnzQaxOkbNBv4YclwqWD7cIehBcI2EnAHNLqqDLPNyxp4U:SJGgzQ+OkIYclw9bqcI2Eqn
TLSH
T1EC848E0AFA9504F8E0B7923CCC665A06E7727C6D07709ADF13A446572F236E09E3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-19_6b2525af3a2709f1c390a7e1d595ed90_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-19_6b2525af3a2709f1c390a7e1d595ed90_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 392KB

2026-07-19_6b2525af3a2709f1c390a7e1d595ed90_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH ab4b1015931a099f2a19b6dff87f8ae5
SHA256 ed0b4c39118b5deda76318d38c5c66593514a3294ad9b995c27fd41d7f589253
MD5 6b2525af3a2709f1c390a7e1d595ed90
SHA1 4666be85b836bbf139fb33f05539be37823a7265
SHA512 02a82bfdfc24f4935d3dc9ea38a267f07cbde60326f4ca6e09a23ccbee34ed688fc38c4e3610e3e3f453df7cee1bf1ebb6500466c12ad62b6b464479f1d7f4d6
SSDEEP 6144:jmJGgnzQaxOkbNBv4YclwqWD7cIehBcI2EnAHNLqqDLPNyxp4U:SJGgzQ+OkIYclw9bqcI2Eqn
TLSH
T1EC848E0AFA9504F8E0B7923CCC665A06E7727C6D07709ADF13A446572F236E09E3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

142596

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

GetWindowRect GetSystemMetrics GetClassNameA GetForegroundWindow

advapi32

RegCloseKey RegQueryValueExA RegOpenKeyExA

kernel32

CreateFileW WriteConsoleW SetProcessPriorityBoost SetThreadAffinityMask GetModuleFileNameA Process32First SetPriorityClass VirtualFree GetCurrentProcess SetProcessInformation VirtualAlloc SetThreadPriority CreateMutexA GetModuleHandleA CreateToolhelp32Snapshot Sleep GetTickCount64 GetLastError GetLogicalProcessorInformation GetCurrentThread Process32Next CloseHandle GetProcAddress LoadLibraryA FreeLibrary WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread GetNativeSystemInfo QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WideCharToMultiByte WakeAllConditionVariable InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetStartupInfoW GetCurrentProcessId InitializeSListHead GetConsoleMode RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapReAlloc HeapSize SetFilePointerEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleOutputCP

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-19_6b2525af3a2709f1c390a7e1d595ed90_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_stealc_vidar

user32

advapi32

kernel32

generic