2026-08-11_ec1291bb7a85fcce56724443871178d9_cobalt-strike_icedid_luca-stealer_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-11_ec1291bb7a85fcce56724443871178d9_cobalt-strike_icedid_luca-stealer_njrat
Size 148KB
Sample260811-fdhcysce39
SHA256 2e181f4c02ef41b77d78907a4ed76340871947fc20d2ee98ea056589cc6a34e7
MD5 ec1291bb7a85fcce56724443871178d9
SHA1 7f16c57991ea6e8197ac7ec9682d94252d7f253d
SHA512 c1a97155088f69792991fd1a0d2276f9ea28fe5d6b2ea30a62fa0e51da4afeac3c1aac8ba5680bd3c1919ce5b19bd4f3bae4a79d30643deec1876b7edad90904
SSDEEP 3072:sWi8aoIOXdBsL3Awgk0K4l4YP2ZO9wKAE+1s:jitgXdBszAW0KZYWns
TLSH
T1CBE34C17B3E130F9E177963888625606F773743207709B9F0BA842795F27680AE3AF65
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-11_ec1291bb7a85fcce56724443871178d9_cobalt-strike_icedid_luca-stealer_njrat

File Explorer

2026-08-11_ec1291bb7a85fcce56724443871178d9_cobalt-strike_icedid_luca-stealer_njrat

.exe 148KB

2026-08-11_ec1291bb7a85fcce56724443871178d9_cobalt-strike_icedid_luca-stealer_njrat

IMPHASH 761d65a048b8cc9c02d54d0846a12cb8
SHA256 2e181f4c02ef41b77d78907a4ed76340871947fc20d2ee98ea056589cc6a34e7
MD5 ec1291bb7a85fcce56724443871178d9
SHA1 7f16c57991ea6e8197ac7ec9682d94252d7f253d
SHA512 c1a97155088f69792991fd1a0d2276f9ea28fe5d6b2ea30a62fa0e51da4afeac3c1aac8ba5680bd3c1919ce5b19bd4f3bae4a79d30643deec1876b7edad90904
SSDEEP 3072:sWi8aoIOXdBsL3Awgk0K4l4YP2ZO9wKAE+1s:jitgXdBszAW0KZYWns
TLSH
T1CBE34C17B3E130F9E177963888625606F773743207709B9F0BA842795F27680AE3AF65
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdiplus

GdiplusShutdown GdipDrawImageRectI GdipSetPixelOffsetMode GdipSetSmoothingMode GdipSetInterpolationMode GdipDeleteGraphics GdipCreateFromHDC GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipLoadImageFromFile GdiplusStartup

shell32

SHFileOperationW CommandLineToArgvW

user32

SetWindowLongPtrW GetWindowLongPtrW FillRect SetCursor MessageBoxW GetClientRect SetWindowTextW InvalidateRect EndPaint BeginPaint ReleaseDC GetDC UpdateWindow LoadCursorW LoadIconW KillTimer SetTimer ReleaseCapture SetCapture SetWindowPlacement GetWindowPlacement SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW DispatchMessageW TranslateMessage GetMessageW GetSystemMetrics DrawTextW

gdi32

SetTextColor SetBkMode SelectObject GetTextExtentPoint32W GetStockObject GetDeviceCaps DeleteObject DeleteDC CreateSolidBrush CreateFontW CreateCompatibleDC CreateCompatibleBitmap BitBlt

shlwapi

PathFindExtensionW PathCompactPathW

kernel32

FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetFileType HeapReAlloc HeapFree HeapAlloc GetModuleHandleExW ExitProcess GetModuleFileNameW WriteFile GetStdHandle RtlPcToFileHeader RaiseException EncodePointer LCMapStringW GetProcessHeap SetFilePointerEx HeapSize FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW GetCPInfo RtlVirtualUnwind LoadLibraryExW GetProcAddress FreeLibrary GetCommandLineW CreateFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetFileSizeEx CloseHandle GetLastError LocalFree MulDiv RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW TlsFree RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-11_ec1291bb7a85fcce56724443871178d9_cobalt-strike_icedid_luca-stealer_njrat

gdiplus

shell32

user32

gdi32

shlwapi

kernel32

generic