2026-08-05_533136ecb09431ff6a09edf69bef9f18_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_533136ecb09431ff6a09edf69bef9f18_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 1.3MB
Sample260805-hs93macj5w
SHA256 58fbd67bd7d7caee2119ab47d7742ec8295b0662ba2d40f56054d96afef4c3e5
MD5 533136ecb09431ff6a09edf69bef9f18
SHA1 940575f6ce0693671bd20c32637a01fb893d651d
SHA512 0604ef6f786bb7053f0fddb0333426a3b1319f62fe0734ed9ca4e9d1472b8fadb442a4b64504a73d589d5c3beebd6a1c240ed7afd837ad7e52b04c545bc2a8ac
SSDEEP 24576:HIoCpPpONxe9xne2twue5C/UZ606TWPiCXnnAD:HIoCJpyxeze2SuyUseLWnA
TLSH
T11355BF8D73B841FCD0A7D175DAA2590BEE74745A072089EB83AC0E192F637D49A7F702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_533136ecb09431ff6a09edf69bef9f18_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-08-05_533136ecb09431ff6a09edf69bef9f18_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 1.3MB

2026-08-05_533136ecb09431ff6a09edf69bef9f18_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH fd3427d68144b8beb81c1594b89feaaa
SHA256 58fbd67bd7d7caee2119ab47d7742ec8295b0662ba2d40f56054d96afef4c3e5
MD5 533136ecb09431ff6a09edf69bef9f18
SHA1 940575f6ce0693671bd20c32637a01fb893d651d
SHA512 0604ef6f786bb7053f0fddb0333426a3b1319f62fe0734ed9ca4e9d1472b8fadb442a4b64504a73d589d5c3beebd6a1c240ed7afd837ad7e52b04c545bc2a8ac
SSDEEP 24576:HIoCpPpONxe9xne2twue5C/UZ606TWPiCXnnAD:HIoCJpyxeze2SuyUseLWnA
TLSH
T11355BF8D73B841FCD0A7D175DAA2590BEE74745A072089EB83AC0E192F637D49A7F702
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

642788

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\MONSTER\Desktop\cs2 project\x64\Release\ploxiedcs2.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

kernel32

Process32NextW Process32FirstW CloseHandle GetWindowsDirectoryA Module32FirstW ReadProcessMemory GetConsoleWindow Module32NextW VirtualFree VirtualAlloc GetCurrentThreadId GetModuleHandleA GetProcAddress GetCurrentProcessId GetModuleFileNameW GetTempPathW MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID GetTickCount64 GetLocaleInfoW LCMapStringW LoadLibraryExW VirtualProtect HeapFree GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapAlloc GetFileType SetFilePointerEx GetFileSizeEx UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext WriteFile GetStdHandle TerminateProcess ExitProcess GetCurrentProcess IsProcessorFeaturePresent ReadFile DeleteFileW GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread Sleep CreateToolhelp32Snapshot OpenProcess GetFileAttributesW CreateFileW DeviceIoControl WriteProcessMemory GetProcessHeap SetStdHandle FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry HeapSize WriteConsoleW SetEndOfFile IsValidLocale FormatMessageA LocalFree RtlUnwind GetLocaleInfoEx FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW CreateFile2 AreFileApisANSI GetLastError GetModuleHandleW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead

user32

SendInput SetWindowLongW UpdateWindow RegisterClassExA GetDesktopWindow GetCursorPos LoadCursorW GetClipboardData LoadIconW GetKeyState ScreenToClient ClientToScreen GetKeyboardLayout GetForegroundWindow SetCursor GetClientRect SetCursorPos OpenClipboard CloseClipboard EmptyClipboard TranslateMessage SetClipboardData GetWindowRect DestroyWindow SetWindowPos GetSystemMetrics ShowWindow GetAsyncKeyState DispatchMessageW PeekMessageW SetWindowDisplayAffinity MessageBoxA DefWindowProcA CreateWindowExA SetLayeredWindowAttributes BringWindowToTop UnregisterClassA

advapi32

RegCloseKey RegDeleteTreeW RegSetKeyValueW RegOpenKeyW RegCreateKeyW

shell32

ShellExecuteA

ntdll

RtlInitUnicodeString NtLoadDriver NtUnloadDriver NtQuerySystemInformation RtlAdjustPrivilege

winmm

timeBeginPeriod

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

Name

.text

Size

828KB

Virtual Size

827KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

413KB

Virtual Size

413KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_533136ecb09431ff6a09edf69bef9f18_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

d3d11

d3dcompiler_47

dwmapi

kernel32

user32

advapi32

shell32

ntdll

winmm

imm32

generic