2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 849KB
Sample260723-glv5fsem9s
SHA256 585d762ad2e1de150df9ab288efdc4e91f3858ccec55e3a45ffb4e6d88d2af66
MD5 7d6a2ae1cc08f66e98d21e21a51e70e3
SHA1 3675e9a7b92129f21a9dc7a0147c7179d74e8fb2
SHA512 00074b068c9377b38e32cf0311982564f93eb8957dccc08266e999129ff6070a8784b375fdd887212fddceebd2748c804159062591b2308d888d4b6da36b05d4
SSDEEP 12288:VE6J8TG9MGfZ7iqt++Etguve1VBDcalbwyUPyiC0nJor1bj:m6J8T0J7iqI+pVBDcalbbiXnJe
TLSH
T19A05BF86F2B801F9D07B9139C5C6A61BEA723859076056DF13E446683FB36F05BBB312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 849KB

2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 36c13fdedad87480260dedaaf3f9a83a
SHA256 585d762ad2e1de150df9ab288efdc4e91f3858ccec55e3a45ffb4e6d88d2af66
MD5 7d6a2ae1cc08f66e98d21e21a51e70e3
SHA1 3675e9a7b92129f21a9dc7a0147c7179d74e8fb2
SHA512 00074b068c9377b38e32cf0311982564f93eb8957dccc08266e999129ff6070a8784b375fdd887212fddceebd2748c804159062591b2308d888d4b6da36b05d4
SSDEEP 12288:VE6J8TG9MGfZ7iqt++Etguve1VBDcalbwyUPyiC0nJor1bj:m6J8T0J7iqI+pVBDcalbbiXnJe
TLSH
T19A05BF86F2B801F9D07B9139C5C6A61BEA723859076056DF13E446683FB36F05BBB312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

486780

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptCloseAlgorithmProvider BCryptSetProperty BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptEncrypt BCryptDecrypt BCryptDestroyKey BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash

d3d11

D3D11CreateDeviceAndSwapChain

user32

DefWindowProcW PeekMessageA DispatchMessageA ReleaseCapture PostQuitMessage UnregisterClassW RegisterClassExW CreateWindowExW DestroyWindow ShowWindow UpdateWindow LoadIconW OpenClipboard CloseClipboard SetClipboardData GetClipboardData EnumDisplayMonitors GetMonitorInfoA MonitorFromWindow LoadCursorA SetWindowLongPtrA SetWindowLongW SetWindowLongA GetWindowLongW WindowFromPoint ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos AdjustWindowRectEx GetClientRect GetPropA SetPropA ReleaseDC GetDC SetForegroundWindow GetForegroundWindow IsWindowUnicode EmptyClipboard SetCapture GetCapture GetKeyState SetFocus BringWindowToTop IsIconic SetWindowPos SetLayeredWindowAttributes IsChild GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout TranslateMessage

gdi32

GetDeviceCaps

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpSetTimeouts WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders

kernel32

GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType HeapAlloc HeapFree GetStdHandle GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer SetLastError RtlUnwindEx RaiseException RtlPcToFileHeader InitializeSListHead GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc GetCurrentProcessId SetEnvironmentVariableW GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateDirectoryW CreateFileW DeleteFileW GetFileAttributesA ReadFile WriteFile GetTempPathW CloseHandle GetLastError WaitForSingleObject Sleep CreateRemoteThread GetExitCodeThread OpenProcess GetLocalTime GetTickCount VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW GetEnvironmentVariableW GetFileAttributesW OutputDebugStringA ExitProcess GetModuleFileNameW MoveFileExW SystemTimeToFileTime GetFileSizeEx CreateDirectoryA CreateFileA GetVolumeInformationA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency FreeLibrary GetModuleHandleA LoadLibraryA IsDBCSLeadByte SetEndOfFile WriteConsoleW GetProcessHeap SetStdHandle GetStringTypeW TerminateProcess HeapSize GetLocaleInfoA GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW InitializeCriticalSectionEx GetSystemTimeAsFileTime

shell32

ShellExecuteW SHGetFolderPathW

advapi32

RegGetValueA

imm32

ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext

d3dcompiler_47

D3DCompile

Name

.text

Size

638KB

Virtual Size

638KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

157KB

Virtual Size

157KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_7d6a2ae1cc08f66e98d21e21a51e70e3_cobalt-strike_icedid_luca-stealer_njrat_stealc

bcrypt

d3d11

user32

gdi32

winhttp

kernel32

shell32

advapi32

imm32

d3dcompiler_47

generic