2026-07-23_31ff923ab2b5ad0c112a9e5823c377f9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-23_31ff923ab2b5ad0c112a9e5823c377f9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 154KB
Sample260723-lacaesba68
SHA256 c221db5e27c1145267e391f447ff9e877eef8de06f2b710abe06e0d190dea966
MD5 31ff923ab2b5ad0c112a9e5823c377f9
SHA1 7538802d09cf914a75b8e8507134ac734676210c
SHA512 6640484712c42d88e005f9c5fb62c14e63dd81f4cee9ca3530a08c5895309e2b7f39de24edad251b7dcc5c1f65a7d3704b26cfbe700bff6b0d66da285ae26289
SSDEEP 3072:Cg7GRS4aEklpQQW/cgFXNJrfXWBcOyG/ON2ehjuX3KGEOj:Co4aEKpQUgX6LehKrE
TLSH
T160F35B4772E530F9E1778638C8A14616FB7378764B609B9F07A442795F23390AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-23_31ff923ab2b5ad0c112a9e5823c377f9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-07-23_31ff923ab2b5ad0c112a9e5823c377f9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 154KB

2026-07-23_31ff923ab2b5ad0c112a9e5823c377f9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH b653396b85775d34f905178326279e8b
SHA256 c221db5e27c1145267e391f447ff9e877eef8de06f2b710abe06e0d190dea966
MD5 31ff923ab2b5ad0c112a9e5823c377f9
SHA1 7538802d09cf914a75b8e8507134ac734676210c
SHA512 6640484712c42d88e005f9c5fb62c14e63dd81f4cee9ca3530a08c5895309e2b7f39de24edad251b7dcc5c1f65a7d3704b26cfbe700bff6b0d66da285ae26289
SSDEEP 3072:Cg7GRS4aEklpQQW/cgFXNJrfXWBcOyG/ON2ehjuX3KGEOj:Co4aEKpQUgX6LehKrE
TLSH
T160F35B4772E530F9E1778638C8A14616FB7378764B609B9F07A442795F23390AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

15840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoInitializeEx CoCreateInstance CoUninitialize

oleaut32

VariantInit SysAllocString

crypt32

CryptStringToBinaryA

ws2_32

send WSAStartup shutdown inet_pton socket connect getsockopt htons ioctlsocket WSAGetLastError select closesocket

user32

wvsprintfA

advapi32

RegCloseKey RegSetValueExW RegOpenKeyExW CryptDestroyKey CryptAcquireContextA CryptDecrypt CryptSetKeyParam CryptImportKey CryptReleaseContext OpenProcessToken GetTokenInformation

shell32

SHGetFolderPathW

kernel32

FlsFree FlsSetValue FlsGetValue CompareStringW GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW SetFilePointerEx HeapSize LCMapStringW HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW FlsAlloc Process32NextW GetEnvironmentStringsW GetCPInfo HeapFree GetCommandLineW GetCurrentProcess WriteFile GetModuleFileNameW GetTempPathW WaitForSingleObject CreateFileW MultiByteToWideChar Sleep GetLastError SetFileInformationByHandle CloseHandle FreeConsole HeapAlloc GetProcessHeap CreateProcessW GetTickCount GetExitCodeProcess GetModuleHandleA GetProcAddress VirtualProtect VirtualFree VirtualAlloc SetThreadpoolTimer CreateThreadpoolTimer ReadFile GetFileSizeEx GetFileAttributesW DeleteFileW LoadLibraryW LocalFree CopyFileW WideCharToMultiByte WriteProcessMemory OpenProcess CreateToolhelp32Snapshot Process32FirstW VirtualAllocEx ExitProcess GetModuleHandleW CreateRemoteThread VirtualFreeEx GetOEMCP QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleHandleExW GetCommandLineA GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-23_31ff923ab2b5ad0c112a9e5823c377f9_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

ole32

oleaut32

crypt32

ws2_32

user32

advapi32

shell32

kernel32

generic