2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 569KB
Sample260810-a94ceagm2t
SHA256 113d3d21ae0c12cdfd126f5aed9a1e5ef007df7f759e6be76ad7af9cb5f589a5
MD5 671c3b2be333380ec99b861df7897066
SHA1 abb571d62188bcac93c7b8da9137bca1b6ac3479
SHA512 a8634b99b806874ba4a1f41351198c3f8fe84902a6d5c703874037559dbf242e03e9cb22d145ecd44b7a30f6db55d8ae29e7729ddfced48343a20b172272ebfe
SSDEEP 12288:8IX/qLhkduvt+W2aC4TtNOyph0lhSMXliLJn:82qLhL2aCi3h0lhSMXlU
TLSH
T122C44B16E7B281E5D4BAC17885126626FE623C5DC334B79B47A48B571F237A0EB3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 569KB

2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 0b850ce0b553272bcee00e3e1af0e554
SHA256 113d3d21ae0c12cdfd126f5aed9a1e5ef007df7f759e6be76ad7af9cb5f589a5
MD5 671c3b2be333380ec99b861df7897066
SHA1 abb571d62188bcac93c7b8da9137bca1b6ac3479
SHA512 a8634b99b806874ba4a1f41351198c3f8fe84902a6d5c703874037559dbf242e03e9cb22d145ecd44b7a30f6db55d8ae29e7729ddfced48343a20b172272ebfe
SSDEEP 12288:8IX/qLhkduvt+W2aC4TtNOyph0lhSMXliLJn:82qLhL2aCi3h0lhSMXlU
TLSH
T122C44B16E7B281E5D4BAC17885126626FE623C5DC334B79B47A48B571F237A0EB3E310
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

201976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetPriorityClass SetConsoleTextAttribute GetCurrentProcess GetStdHandle WriteFile VirtualAlloc CreateNamedPipeW SetThreadPriority PeekNamedPipe WaitForSingleObject CreateFileW GetCurrentThreadId ResumeThread Sleep BuildIoRingRegisterBuffers CloseIoRing CloseHandle LoadLibraryW CreateThread SetThreadIdealProcessor SubmitIoRing GetProcAddress GetCurrentProcessId CreateProcessW PopIoRingCompletion BuildIoRingWriteFile CreateIoRing FlushFileBuffers WriteConsoleW BuildIoRingReadFile ReadFile GetLastError SetThreadAffinityMask HeapSize SetStdHandle MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap RtlUnwind

advapi32

AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW

ntdll

NtQuerySystemInformation

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-10_671c3b2be333380ec99b861df7897066_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

advapi32

ntdll

generic