2026-07-26_36b4de57369e27395ce0dfae515cfef7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

General

Target
2026-07-26_36b4de57369e27395ce0dfae515cfef7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 654KB
Sample260726-2ce24asthv
SHA256 d80fb73ae69feb58df8cdd4f6c8cc33aca36271f3860ddaafaa5a2b561f40392
MD5 36b4de57369e27395ce0dfae515cfef7
SHA1 c8b5709d53271a3018fa95f3e485d9e6a3a5e469
SHA512 45d10385294c8fef3a12c4c9b4329ab3636b6da033855ddebd4c1da877fdc2696284f9361ec6ce8bfcb4fb5ff2b4ca033dc6455bfbf5840ebffd1e0f99e4fe84
SSDEEP 12288:6MQHKNzCfwj3aIiO8SX9JRPtdI4S9pB+WgSfqqiuXUhifaQbUVqxGqX19jI:6MQwTj3aIiDiJZtkI7hif46Gql2
TLSH
T11AE4D026B6F504FDD1A7C177C9524506E7B2BC5B4370AB8F03A04AD61F27AA84E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-26_36b4de57369e27395ce0dfae515cfef7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-07-26_36b4de57369e27395ce0dfae515cfef7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 654KB

2026-07-26_36b4de57369e27395ce0dfae515cfef7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 4134f625955dab6b6e6aff846f6ee97a
SHA256 d80fb73ae69feb58df8cdd4f6c8cc33aca36271f3860ddaafaa5a2b561f40392
MD5 36b4de57369e27395ce0dfae515cfef7
SHA1 c8b5709d53271a3018fa95f3e485d9e6a3a5e469
SHA512 45d10385294c8fef3a12c4c9b4329ab3636b6da033855ddebd4c1da877fdc2696284f9361ec6ce8bfcb4fb5ff2b4ca033dc6455bfbf5840ebffd1e0f99e4fe84
SSDEEP 12288:6MQHKNzCfwj3aIiO8SX9JRPtdI4S9pB+WgSfqqiuXUhifaQbUVqxGqX19jI:6MQwTj3aIiDiJZtkI7hif46Gql2
TLSH
T11AE4D026B6F504FDD1A7C177C9524506E7B2BC5B4370AB8F03A04AD61F27AA84E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

117648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

user32

GetSystemMetrics

gdi32

GetDeviceCaps

kernel32

SetStdHandle WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetProcessHeap HeapSize LCMapStringEx GetStdHandle CloseHandle Sleep WideCharToMultiByte SetConsoleOutputCP GetConsoleScreenBufferInfo SetConsoleTextAttribute ExpandEnvironmentStringsW WaitForSingleObject CreateFileW ReadFile SetFilePointer GetLastError CreateProcessW WriteFile ConnectNamedPipe PeekNamedPipe CreateNamedPipeW GetCurrentProcessId GetCurrentThreadId GetTickCount GetTickCount64 GetModuleHandleW LocalFree FormatMessageA GetLocaleInfoEx GetCurrentDirectoryW CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW CreateFile2 AreFileApisANSI GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer RtlUnwind GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead GetOEMCP RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetModuleFileNameW GetCommandLineA GetCommandLineW HeapFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc GetFileType VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc IsValidCodePage GetACP

Name

.text

Size

253KB

Virtual Size

252KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

376KB

Virtual Size

376KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-26_36b4de57369e27395ce0dfae515cfef7_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

version

user32

gdi32

kernel32

generic