2026-08-08_ac6473e71ef6948b078eb7dbd37aa665_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_ac6473e71ef6948b078eb7dbd37aa665_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 1.5MB
Sample260809-ae3gmafh84
SHA256 98b8f56a0925a224c623ea975f383214cbe0902c1a00a3cd8c57868f22fee6ec
MD5 ac6473e71ef6948b078eb7dbd37aa665
SHA1 2737e673dedfc03caf05ae8c334e994c47c2984c
SHA512 5b6e4db8072b7ccc691944bbfdf075f4561b928b5c7a1db1f8015ca2366b960b5750b0264977cb0f7ecef075c1d24ad7745dc67f81777a64be9c8c040e3442f2
SSDEEP 24576:4SVnm7ksWnMrXUxUR4EQeaS4HpNt3f7nIgWUhHUNNn8cxiXhK3Z/PYMEQsh:LnmhXRn4H53THWUhHUNTmhK3ZX/Rsh
TLSH
T19675BF1666A901ECE0B7E27889578913E376780B03719FDF07D096662F677E09E3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-08_ac6473e71ef6948b078eb7dbd37aa665_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-08_ac6473e71ef6948b078eb7dbd37aa665_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 1.5MB

2026-08-08_ac6473e71ef6948b078eb7dbd37aa665_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 1cb92eab0a6fa0662b88405fb53805ce
SHA256 98b8f56a0925a224c623ea975f383214cbe0902c1a00a3cd8c57868f22fee6ec
MD5 ac6473e71ef6948b078eb7dbd37aa665
SHA1 2737e673dedfc03caf05ae8c334e994c47c2984c
SHA512 5b6e4db8072b7ccc691944bbfdf075f4561b928b5c7a1db1f8015ca2366b960b5750b0264977cb0f7ecef075c1d24ad7745dc67f81777a64be9c8c040e3442f2
SSDEEP 24576:4SVnm7ksWnMrXUxUR4EQeaS4HpNt3f7nIgWUhHUNNn8cxiXhK3Z/PYMEQsh:LnmhXRn4H53THWUhHUNTmhK3ZX/Rsh
TLSH
T19675BF1666A901ECE0B7E27889578913E376780B03719FDF07D096662F677E09E3E720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

530584

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

UnmapViewOfFile CreateFileMappingW MapViewOfFile Sleep GetCurrentProcessId LoadLibraryW GetProcAddress InitializeCriticalSectionEx DeleteCriticalSection GetModuleHandleW DecodePointer GetModuleFileNameW HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap CreateProcessW GetTickCount GetTempPathW WaitNamedPipeW ReadFile GetModuleHandleA LoadLibraryA WritePrivateProfileStringW TerminateProcess GetCurrentProcess FindResourceW LoadResource SizeofResource LockResource LoadLibraryExW GetFileAttributesW FreeLibrary MultiByteToWideChar IsWow64Process GetTickCount64 SetLastError ResumeThread WaitForSingleObject GetFileSizeEx LocalFree CreateDirectoryW SetEndOfFile WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WriteFile CreateFileW GetLastError GetPrivateProfileStringW CloseHandle GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileType GetStdHandle FormatMessageA GetLocaleInfoEx WideCharToMultiByte GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection EncodePointer CompareStringEx GetCPInfo LCMapStringEx QueryPerformanceCounter WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RaiseException RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess RtlUnwind

user32

MessageBoxA SetProcessDPIAware MessageBoxW

advapi32

SetEntriesInAclW ConvertStringSidToSidW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

SHGetFolderPathW ShellExecuteW

ole32

CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocString VariantInit SafeArrayCreate SafeArrayAccessData SafeArrayUnaccessData

mscoree

CLRCreateInstance CorBindToRuntime

wininet

InternetOpenUrlA InternetOpenA InternetReadFile

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

winmm

PlaySoundW

Name

.text

Size

702KB

Virtual Size

702KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

256KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

527KB

Virtual Size

526KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-08_ac6473e71ef6948b078eb7dbd37aa665_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

advapi32

shell32

ole32

oleaut32

mscoree

wininet

version

winmm

generic