2026-08-07_749120bdac0aa1f336b63b8f5e182bbe_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-07_749120bdac0aa1f336b63b8f5e182bbe_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 15.2MB
Sample260808-bja4lsxbjf
SHA256 32d0f4841fff04fc66c8e0ee851105c818ac206ee3c02d2b659e7f324b0d8d73
MD5 749120bdac0aa1f336b63b8f5e182bbe
SHA1 061818d95a1d844813cec410d514cb78b6d7cd6a
SHA512 b5ac007a5616c275d8fb07f885c631a597d397ff535c3cd39664a3a7819bc1b5163114f7829b08578ca49e5ffe712e5b68e7c0e1b7e62fbeee3ac7f2deb0380a
SSDEEP 393216:65Y7nouyTgXeVMOFtkgF5WH4OBSRMf0eueW:6m7nzyoeVMWPSHPSRMseueW
TLSH
T143F6335732524BCDC0035275CDA99F46E79EBC1B4361A2EB5292D0F8AF33B944C3AE91
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_749120bdac0aa1f336b63b8f5e182bbe_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-07_749120bdac0aa1f336b63b8f5e182bbe_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 15.2MB

2026-08-07_749120bdac0aa1f336b63b8f5e182bbe_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 40a4414a3b77070ec78244380c4c1361
SHA256 32d0f4841fff04fc66c8e0ee851105c818ac206ee3c02d2b659e7f324b0d8d73
MD5 749120bdac0aa1f336b63b8f5e182bbe
SHA1 061818d95a1d844813cec410d514cb78b6d7cd6a
SHA512 b5ac007a5616c275d8fb07f885c631a597d397ff535c3cd39664a3a7819bc1b5163114f7829b08578ca49e5ffe712e5b68e7c0e1b7e62fbeee3ac7f2deb0380a
SSDEEP 393216:65Y7nouyTgXeVMOFtkgF5WH4OBSRMf0eueW:6m7nzyoeVMWPSHPSRMseueW
TLSH
T143F6335732524BCDC0035275CDA99F46E79EBC1B4361A2EB5292D0F8AF33B944C3AE91
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54772

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SizeofResource SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetFilePointerEx RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-07_749120bdac0aa1f336b63b8f5e182bbe_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic