2026-08-07_2f551c57a503b3f041e2b366d949777a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-07_2f551c57a503b3f041e2b366d949777a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 1.7MB
Sample260807-hs47dazapb
SHA256 ac6a862a7aeeae4204524d66d7e2bd85688ede7f600472f6872bac99feb071bb
MD5 2f551c57a503b3f041e2b366d949777a
SHA1 e3e6dedaef2430ddb9c21e591e9e24c1452da4a3
SHA512 916d241df6a0d4aa7166ca896704f6ad96f98107142af209508022e26a557f394246bdce4ed06ad922a0290384c5f35db8cbf202c91685a147875445eb595b5f
SSDEEP 12288:sDTTAieCFKXtx55l4rlGlXlGYFGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HJ:0TUieCsLFlnQ/tbw/2Mkjy6Fr7g0oS
TLSH
T16185E000A2908BDDE9B6DE719492486092777C5C7730D79FCB84F6673E336C1987AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_2f551c57a503b3f041e2b366d949777a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-07_2f551c57a503b3f041e2b366d949777a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 1.7MB

2026-08-07_2f551c57a503b3f041e2b366d949777a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 15119b3e97ffd359e603563e1fa5e4cf
SHA256 ac6a862a7aeeae4204524d66d7e2bd85688ede7f600472f6872bac99feb071bb
MD5 2f551c57a503b3f041e2b366d949777a
SHA1 e3e6dedaef2430ddb9c21e591e9e24c1452da4a3
SHA512 916d241df6a0d4aa7166ca896704f6ad96f98107142af209508022e26a557f394246bdce4ed06ad922a0290384c5f35db8cbf202c91685a147875445eb595b5f
SSDEEP 12288:sDTTAieCFKXtx55l4rlGlXlGYFGyS0VTBG//sop9bw/W1wR/kjy6FtgQAdJsg0HJ:0TUieCsLFlnQ/tbw/2Mkjy6Fr7g0oS
TLSH
T16185E000A2908BDDE9B6DE719492486092777C5C7730D79FCB84F6673E336C1987AB22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57108

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Jenkins\.jenkins\workspace\glidex-autorelease-unify\GlideX\GlideXReleaseBuild\GlideXUnify.pdb

kernel32

FreeLibrary OpenFileMappingW MapViewOfFile UnmapViewOfFile CloseHandle GetTickCount64 GetCommandLineW CreateMutexW ExitProcess SetThreadExecutionState Sleep CreateThread WaitForSingleObject TerminateThread OpenProcess CreateEventW OpenEventW WaitForMultipleObjects TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteConsoleW CreateFileW GetConsoleMode GetConsoleOutputCP GetProcAddress HeapReAlloc HeapSize SetFilePointerEx GetStringTypeW SetStdHandle GetProcessHeap LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose MultiByteToWideChar LoadLibraryW WideCharToMultiByte GetCurrentProcess GetModuleFileNameW FlushFileBuffers GetLastError GetFileType HeapAlloc HeapFree WriteFile GetStdHandle EncodePointer GetModuleHandleExW GetCommandLineA LoadLibraryExW TlsFree ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError TlsSetValue

user32

SendMessageTimeoutW GetWindowRect GetMonitorInfoW GetSystemMetrics FindWindowExW wsprintfW TranslateMessage MonitorFromPoint PostQuitMessage EndPaint BeginPaint GetRawInputData DefWindowProcW GetWindowLongW SetWindowLongW CreateWindowExW RegisterClassW LoadIconW mouse_event GetWindowTextW CallNextHookEx PostMessageW UnhookWindowsHookEx UnhookWinEvent DispatchMessageW GetCursorPos GetMessageW SetWinEventHook SetWindowsHookExW RegisterRawInputDevices LoadStringW SetProcessDpiAwarenessContext ReleaseCapture SetCursorPos LoadCursorW ShowCursor SetCursor ClipCursor SetCapture SetTimer ShowWindow SetWindowPos KillTimer FindWindowW

gdi32

CreateSolidBrush

advapi32

EventWriteTransfer EventSetInformation EventRegister EventUnregister SetSecurityDescriptorDacl InitializeSecurityDescriptor

shell32

DragAcceptFiles

ole32

CoUninitialize CoInitialize

Name

.text

Size

155KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

203KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_2f551c57a503b3f041e2b366d949777a_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

gdi32

advapi32

shell32

ole32

generic