2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
Size 27.5MB
Sample260809-ckqfcsycke
SHA256 ca647f31fbe381aacb9fc16f257dc0b8f1db6ee506179fdbd495952ef0c1e8ca
MD5 7ae7165b33b9303fecb34f9767e9c64c
SHA1 f22f55c7e5ee61e885eaabda21c016c835937915
SHA512 31c990d312a06473bf73d59e210a7cc00bb1ccc20bed0dc3207666ee56ef87ffa197973cb0b6e552c6169f80fc1f7edc22d6a4cd34ac39c6368e34075ad12409
SSDEEP 393216:jplJO/BRP3izpseVugy6OJpS7RcoqKZojixo5WrZlINl2N/QgOcpSOQSg184lzOk:tlJOb6NTVFy6aStctit0lUfxSxSWb
TLSH
T1525733CEA16140EFE5B651BCDA280650E66EECAA4B40C47F27C179BC9E770C1CF59B90
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

.exe 27.5MB

2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH dbddda14b2c5952f66b165aa2aa59eaa
SHA256 ca647f31fbe381aacb9fc16f257dc0b8f1db6ee506179fdbd495952ef0c1e8ca
MD5 7ae7165b33b9303fecb34f9767e9c64c
SHA1 f22f55c7e5ee61e885eaabda21c016c835937915
SHA512 31c990d312a06473bf73d59e210a7cc00bb1ccc20bed0dc3207666ee56ef87ffa197973cb0b6e552c6169f80fc1f7edc22d6a4cd34ac39c6368e34075ad12409
SSDEEP 393216:jplJO/BRP3izpseVugy6OJpS7RcoqKZojixo5WrZlINl2N/QgOcpSOQSg184lzOk:tlJOb6NTVFy6aStctit0lUfxSxSWb
TLSH
T1525733CEA16140EFE5B651BCDA280650E66EECAA4B40C47F27C179BC9E770C1CF59B90
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54180

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SizeofResource SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetFilePointerEx RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_7ae7165b33b9303fecb34f9767e9c64c_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic