2026-08-10_d0dfe76c7aeacf2cde3abfd25f2704a4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-10_d0dfe76c7aeacf2cde3abfd25f2704a4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 9.0MB
Sample260810-3gn18sbb84
SHA256 d0951cbca8c08830ca79994bb0aed8f280be35194191db145d0305cf9fb55451
MD5 d0dfe76c7aeacf2cde3abfd25f2704a4
SHA1 f7e2781b62f4bc406d8b145cd521284c8ec3ea51
SHA512 c1a9c5e67df95847b7e1adc4465b2d359b4dc49e305a60be0f17f3327bb9e2481eafddb8beda66e5e2369702aab8887f4e1e453629fff73fc2e1037ee6f6a3a0
SSDEEP 98304:LEVgFAnX5Lga3acN+osMNZo/Y7mgTm05AwJHE6h7pctNcqlZqL9PlF:LEV2KXua3x+t6mg7PAmk8itNRZqL1lF
TLSH
T14096AEA1A29C8298F066A938CD52AA53D3F23C0C1B25CFD735D8ADB72F375D05B39605
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_d0dfe76c7aeacf2cde3abfd25f2704a4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-08-10_d0dfe76c7aeacf2cde3abfd25f2704a4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 9.0MB

2026-08-10_d0dfe76c7aeacf2cde3abfd25f2704a4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH d5bff27de0dd9569ac89ca5397a672da
SHA256 d0951cbca8c08830ca79994bb0aed8f280be35194191db145d0305cf9fb55451
MD5 d0dfe76c7aeacf2cde3abfd25f2704a4
SHA1 f7e2781b62f4bc406d8b145cd521284c8ec3ea51
SHA512 c1a9c5e67df95847b7e1adc4465b2d359b4dc49e305a60be0f17f3327bb9e2481eafddb8beda66e5e2369702aab8887f4e1e453629fff73fc2e1037ee6f6a3a0
SSDEEP 98304:LEVgFAnX5Lga3acN+osMNZo/Y7mgTm05AwJHE6h7pctNcqlZqL9PlF:LEV2KXua3x+t6mg7PAmk8itNRZqL1lF
TLSH
T14096AEA1A29C8298F066A938CD52AA53D3F23C0C1B25CFD735D8ADB72F375D05B39605
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4765652

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\js\Downloads\Roblox\Misty UPDATED\Misty UPDATED\build\Misty.pdb

shlwapi

PathFileExistsA StrStrIA

ws2_32

inet_ntop WSAStartup getaddrinfo freeaddrinfo ntohs setsockopt htons htonl recv socket send listen shutdown select closesocket bind accept

iphlpapi

GetExtendedTcpTable GetAdaptersAddresses CreateIpForwardEntry2 DeleteIpForwardEntry2 InitializeIpForwardEntry GetExtendedUdpTable

advapi32

AllocateAndInitializeSid CheckTokenMembership FreeSid

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

ntdll

RtlPcToFileHeader VerSetConditionMask RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry RtlUnwind RtlUnwindEx

winhttp

WinHttpQueryDataAvailable WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen WinHttpReceiveResponse

kernel32

GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx UnhandledExceptionFilter IsDebuggerPresent GetCommandLineW GetCommandLineA GetModuleFileNameW GetStdHandle IsProcessorFeaturePresent ExitProcess GetModuleHandleA GetLocaleInfoA MultiByteToWideChar LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock ReadFile ReleaseSemaphore WriteFile SetThreadPriority WaitForSingleObject CreateFileW Sleep GetFileInformationByHandle GetLastError CreateFileA SetEvent CloseHandle CreateThread ResetEvent CreateSemaphoreA CreateEventA GetProcessId ReadProcessMemory FindFirstFileA FindNextFileA FindClose CreateToolhelp32Snapshot GetTickCount64 GetFileAttributesA Process32NextW SetDllDirectoryA DeleteFileA Process32FirstW GetEnvironmentStrings CreateProcessA CreateDirectoryA FreeEnvironmentStringsA SwitchToThread GetConsoleWindow Module32Next Module32First OpenProcess lstrcmpiW GetCurrentThread GetExitCodeProcess MoveFileA Process32First TerminateProcess Process32Next GetFileSize HeapSize SetEnvironmentVariableW GetLocalTime ExpandEnvironmentStringsA GetEnvironmentVariableA VirtualProtect GetCurrentProcessId GetCurrentProcess GetFileSizeEx HeapAlloc HeapReAlloc HeapFree GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA FreeEnvironmentStringsW FreeLibraryAndExitThread ExitThread FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCPInfo GetStringTypeW LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetFileInformationByHandleEx GetModuleHandleW AreFileApisANSI CreateFile2 SetFileInformationByHandle GetFileAttributesExW FindNextFileW FindFirstFileExW FindFirstFileW CreateDirectoryW GetLocaleInfoEx GetEnvironmentStringsW LocalFree GetModuleHandleExW RaiseException FormatMessageA WakeAllConditionVariable WakeConditionVariable GetExitCodeThread WaitForSingleObjectEx SleepConditionVariableSRW LoadLibraryExW CompareStringW LCMapStringW QueryFullProcessImageNameA GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP CreateProcessW IsValidCodePage GetACP WriteConsoleW SetStdHandle CreatePipe GetOEMCP ReleaseSRWLockExclusive AcquireSRWLockExclusive AcquireSRWLockShared SetHandleInformation SetEndOfFile ReleaseSRWLockShared GetCurrentThreadId TryAcquireSRWLockExclusive GetSystemTimePreciseAsFileTime

user32

GetClipboardData GetCursorPos ReleaseDC SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor SetCapture GetForegroundWindow GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture ScreenToClient GetKeyNameTextA MapVirtualKeyA MonitorFromPoint SetWindowLongA MessageBoxA UnregisterClassA PostQuitMessage UpdateWindow GetWindowThreadProcessId SetWindowDisplayAffinity IsWindowVisible FindWindowA GetAsyncKeyState mouse_event SendInput DispatchMessageA GetWindowRect DestroyWindow SetWindowPos SetWindowRgn FillRect GetSystemMetrics GetClassNameA ShowWindow DrawTextA GetWindowTextA EnumWindows DefWindowProcA CreateWindowExA SetLayeredWindowAttributes TranslateMessage PeekMessageA GetWindowLongPtrA SetWinEventHook SetWindowLongPtrA RegisterClassExA InvalidateRect BeginPaint EndPaint IsWindow OpenClipboard CloseClipboard EmptyClipboard GetMessageA SetClipboardData GetKeyState GetMessageExtraInfo LoadCursorA GetDC

gdi32

SetBkMode CreateRectRgn BitBlt CreateCompatibleBitmap CreateFontA SelectObject CreateCompatibleDC CreateRoundRectRgn DeleteDC SetTextColor DeleteObject LineTo CreatePen MoveToEx Ellipse CreateSolidBrush CombineRgn GetDeviceCaps

comdlg32

GetOpenFileNameA

shell32

ShellExecuteA SHGetFolderPathA SHGetKnownFolderPath

ole32

CoTaskMemFree

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

winmm

PlaySoundA timeBeginPeriod

Name

.text

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_d0dfe76c7aeacf2cde3abfd25f2704a4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

shlwapi

ws2_32

iphlpapi

advapi32

d3d11

d3dx11_43

ntdll

winhttp

kernel32

user32

gdi32

comdlg32

shell32

ole32

d3dcompiler_47

dwmapi

imm32

winmm

generic