2026-08-04_7131e31ee84a2ff18df773d6fdc77845_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

General

Target
2026-08-04_7131e31ee84a2ff18df773d6fdc77845_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 304KB
Sample260804-hmwcaatcnc
SHA256 5a0948dc69f2a49a7e3586caa3702cc9408bcb7c10358fd0c1ba08cd29e20195
MD5 7131e31ee84a2ff18df773d6fdc77845
SHA1 3770fad2dd80fcd5caa9dd603c4233102d7ebd0c
SHA512 ecd3343858509a0c4a742f1f53dfda12679aeb64904af1e63ae47b3ba851c9d93b27253061046c9ded76145c5ed618b805a082fadbc6602e7b18a60ad8e3bafc
SSDEEP 3072:irsW2DN/s00eLRdYrY92ahEq1nuR0OmElwbftoQpLxAVl5Pq+xjg4bteOjuSC8Sa:Y00Vl0Eq1nUTUb1uXpzqG
TLSH
T104648D1AF7A410FDE967817CCD524906EA72BC564761EACF03A04A973F236E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-04_7131e31ee84a2ff18df773d6fdc77845_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-08-04_7131e31ee84a2ff18df773d6fdc77845_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 304KB

2026-08-04_7131e31ee84a2ff18df773d6fdc77845_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 325fba259dc257729e0f41502b502dae
SHA256 5a0948dc69f2a49a7e3586caa3702cc9408bcb7c10358fd0c1ba08cd29e20195
MD5 7131e31ee84a2ff18df773d6fdc77845
SHA1 3770fad2dd80fcd5caa9dd603c4233102d7ebd0c
SHA512 ecd3343858509a0c4a742f1f53dfda12679aeb64904af1e63ae47b3ba851c9d93b27253061046c9ded76145c5ed618b805a082fadbc6602e7b18a60ad8e3bafc
SSDEEP 3072:irsW2DN/s00eLRdYrY92ahEq1nuR0OmElwbftoQpLxAVl5Pq+xjg4bteOjuSC8Sa:Y00Vl0Eq1nUTUb1uXpzqG
TLSH
T104648D1AF7A410FDE967817CCD524906EA72BC564761EACF03A04A973F236E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

62516

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winhttp

WinHttpCloseHandle WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpReadData WinHttpConnect WinHttpOpen

gdi32

CreateFontW SetTextColor SetStretchBltMode StretchBlt SetBkMode SelectObject GetDIBits DeleteObject BitBlt CreateCompatibleBitmap CreateCompatibleDC CreateSolidBrush DeleteDC

user32

ExitWindowsEx FillRect SetCursorPos ReleaseDC GetDC DrawTextA GetSystemMetrics SendInput VkKeyScanA ShowWindow

kernel32

SetStdHandle HeapSize CreateFileW WriteConsoleW SetEndOfFile GetLastError GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose FindFirstFileA FindNextFileA Sleep GetComputerNameA GetConsoleWindow QueryPerformanceCounter QueryPerformanceFrequency WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx RtlUnwind SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree CloseHandle DuplicateHandle GetCurrentProcess CreateProcessW IsProcessorFeaturePresent ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetProcAddress GetModuleFileNameW GetStdHandle WriteFile RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW WaitForSingleObject GetExitCodeProcess GetFileAttributesExW CreatePipe HeapReAlloc

Name

.text

Size

203KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-04_7131e31ee84a2ff18df773d6fdc77845_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

winhttp

gdi32

user32

kernel32

generic