2026-07-30_e1860cbaacc0dceedd1a7235dfe2388d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-07-30_e1860cbaacc0dceedd1a7235dfe2388d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 8.3MB
Sample260730-c933rabp4y
SHA256 3a548cd75f0eaedd0f20772d7f68c17e4ed5a39a756cd7a8dd3672f18a86dea0
MD5 e1860cbaacc0dceedd1a7235dfe2388d
SHA1 2a294454c8116c3c7f5d8115c773dd350ae166b8
SHA512 483fe5985d9cb1e6d34e5fc8e8498a5e82f5ca1767489bff5d21b01ee316c62a8c48c85e38b2a6c4784866281d024f8fe6c6f9f9e0c09c754cc7734f106a42b2
SSDEEP 196608:OsyYNndk9ZTcZSu0Ca7axPOSi93Hvj5k6q9sYntOcao:fyYNndk9ASFbWM1Pdnq9sYtOx
TLSH
T16D960280CD8D753AFD15FCF9FF071BEA960B3C58B8B6204D913D2849A49D6D63890672
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_e1860cbaacc0dceedd1a7235dfe2388d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-07-30_e1860cbaacc0dceedd1a7235dfe2388d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 8.3MB

2026-07-30_e1860cbaacc0dceedd1a7235dfe2388d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH c6f19b5cbf723b84b85e172a1485654b
SHA256 3a548cd75f0eaedd0f20772d7f68c17e4ed5a39a756cd7a8dd3672f18a86dea0
MD5 e1860cbaacc0dceedd1a7235dfe2388d
SHA1 2a294454c8116c3c7f5d8115c773dd350ae166b8
SHA512 483fe5985d9cb1e6d34e5fc8e8498a5e82f5ca1767489bff5d21b01ee316c62a8c48c85e38b2a6c4784866281d024f8fe6c6f9f9e0c09c754cc7734f106a42b2
SSDEEP 196608:OsyYNndk9ZTcZSu0Ca7axPOSi93Hvj5k6q9sYntOcao:fyYNndk9ASFbWM1Pdnq9sYtOx
TLSH
T16D960280CD8D753AFD15FCF9FF071BEA960B3C58B8B6204D913D2849A49D6D63890672
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

19668

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileW WriteFile CloseHandle GetLastError MultiByteToWideChar SetLastError HeapAlloc HeapFree GetProcessHeap GetNativeSystemInfo VirtualAlloc VirtualProtect VirtualFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr SetEvent ReleaseSemaphore ReleaseMutex WaitForSingleObject CreateMutexA CreateEventA Sleep WaitForMultipleObjects CreateThread CreateSemaphoreA WriteConsoleW HeapSize GetFileSizeEx GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlPcToFileHeader RaiseException RtlUnwindEx EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType GetConsoleMode

user32

DefWindowProcW GetMessageW CreateWindowExW ShowWindow ShutdownBlockReasonCreate DispatchMessageW TranslateMessage RegisterClassW ShutdownBlockReasonDestroy

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_e1860cbaacc0dceedd1a7235dfe2388d_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

generic