2026-08-09_008afe4e38cbd83b803a0e1ca0708ae2_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-09_008afe4e38cbd83b803a0e1ca0708ae2_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
Size 34.7MB
Sample260809-jrf9labp8w
SHA256 5df5c8754aad17a52fff3241210a3628e13f6c943c8c71afe175322153cf33a0
MD5 008afe4e38cbd83b803a0e1ca0708ae2
SHA1 3b2bff26d6bef1053e550f4fe276c741eb4224b6
SHA512 c74adef372b247fa4f9065f643b923c5f1cfc228de27deec6dcd32dae611eb3e10bd0d96b3ad25960f19b18386d2bffbe260b0aa49332e87f237ab89fd4c9d16
SSDEEP 786432:WNmf36hnnKtXTkbGa4Q4hTLFTw85Vw1hWxHGQXee1S2SEb0jDVpGxA7:WNmfWnKtDkbGqyTLFk18xmQXez2pbcDB
TLSH
T11B87331965D7EDF6FE4382B8C2CE1050E567CE4D17829CE212FA4680FB635E3DAE4246
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_008afe4e38cbd83b803a0e1ca0708ae2_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-09_008afe4e38cbd83b803a0e1ca0708ae2_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

.exe 34.7MB

2026-08-09_008afe4e38cbd83b803a0e1ca0708ae2_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 304014587415dc297fb1294dfd682b25
SHA256 5df5c8754aad17a52fff3241210a3628e13f6c943c8c71afe175322153cf33a0
MD5 008afe4e38cbd83b803a0e1ca0708ae2
SHA1 3b2bff26d6bef1053e550f4fe276c741eb4224b6
SHA512 c74adef372b247fa4f9065f643b923c5f1cfc228de27deec6dcd32dae611eb3e10bd0d96b3ad25960f19b18386d2bffbe260b0aa49332e87f237ab89fd4c9d16
SSDEEP 786432:WNmf36hnnKtXTkbGa4Q4hTLFTw85Vw1hWxHGQXee1S2SEb0jDVpGxA7:WNmfWnKtDkbGqyTLFk18xmQXez2pbcDB
TLSH
T11B87331965D7EDF6FE4382B8C2CE1050E567CE4D17829CE212FA4680FB635E3DAE4246
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54732

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SizeofResource SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetFilePointerEx RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_008afe4e38cbd83b803a0e1ca0708ae2_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic