2026-08-04_e035f18f47914ae6aecb2b1529c9e9cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-04_e035f18f47914ae6aecb2b1529c9e9cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 151KB
Sample260804-ftqdha1hpd
SHA256 b4fa12e3cfbeae3f742226a9a04d529d7b056ca4313dbf1e9d1b07e50a9099f5
MD5 e035f18f47914ae6aecb2b1529c9e9cf
SHA1 08077b42c733e780b37c61a88b6ee93b58f839cd
SHA512 38a047fc70e01fb94de3f882dc058db50d525b96cba677acaf59588b0e6072a7d733551e93fb2b1afcfa05f77a16fc50c05c0cb64625f24f6c989ce745a9448a
SSDEEP 3072:WuyLRmI+7ZFkG2M0XPLjOnT3q82F3l1lov:2RmIWOGmanT68YS
TLSH
T147E34B5773A531F9E1B7823889A50606F772783217609BEF03A447762F232D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_e035f18f47914ae6aecb2b1529c9e9cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-04_e035f18f47914ae6aecb2b1529c9e9cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 151KB

2026-08-04_e035f18f47914ae6aecb2b1529c9e9cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 3dce6aae1b0be31ceaa40e17d562825b
SHA256 b4fa12e3cfbeae3f742226a9a04d529d7b056ca4313dbf1e9d1b07e50a9099f5
MD5 e035f18f47914ae6aecb2b1529c9e9cf
SHA1 08077b42c733e780b37c61a88b6ee93b58f839cd
SHA512 38a047fc70e01fb94de3f882dc058db50d525b96cba677acaf59588b0e6072a7d733551e93fb2b1afcfa05f77a16fc50c05c0cb64625f24f6c989ce745a9448a
SSDEEP 3072:WuyLRmI+7ZFkG2M0XPLjOnT3q82F3l1lov:2RmIWOGmanT68YS
TLSH
T147E34B5773A531F9E1B7823889A50606F772783217609BEF03A447762F232D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

7312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetLastError HeapAlloc HeapFree GetProcessHeap GetModuleHandleW CreateFileW CloseHandle HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType WriteConsoleW

user32

GetMessageW TranslateMessage DispatchMessageW DefWindowProcW UnregisterClassW RegisterClassExW RegisterRawInputDevices GetRawInputData GetWindowThreadProcessId GetWindowTextW GetForegroundWindow MapVirtualKeyW ToUnicode GetKeyboardState GetKeyState DestroyWindow CreateWindowExW

wininet

InternetCloseHandle InternetConnectW InternetSetOptionW HttpOpenRequestW HttpSendRequestA InternetOpenW

Name

.text

Size

94KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_e035f18f47914ae6aecb2b1529c9e9cf_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

kernel32

user32

wininet

generic