2026-08-12_cfc7a72df79bffd37a2a5504ffe0ce43_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-08-12_cfc7a72df79bffd37a2a5504ffe0ce43_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 8.3MB
Sample260812-lrkccsterc
SHA256 f39942724143c684a3b227958581e5459a885f02aa23d4d577bd6dfcdff677c4
MD5 cfc7a72df79bffd37a2a5504ffe0ce43
SHA1 43bcbef1c3f312d23b221378cef555043bef312a
SHA512 5a9cd34e9fa8bcdaed2aee5e1dccb092e00b3fccda6d5d0a27879a5217611609893d9c5428c86a6b49fffd24914ffbae6bc50d1160ed4828f6a3da2a32f76d1f
SSDEEP 196608:E7bbzzIcHLXNJETDvQuUzalHRMgnP5K6lAcQqaVTzjUHdvoV:OfNbNJEia1RMgxmctyzj2V
TLSH
T18096026D880C50F8FA25D8F1DE9B3793DE1BF4930BB21747122F4299CC8E942679266D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_cfc7a72df79bffd37a2a5504ffe0ce43_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-12_cfc7a72df79bffd37a2a5504ffe0ce43_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 8.3MB

2026-08-12_cfc7a72df79bffd37a2a5504ffe0ce43_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH c6f19b5cbf723b84b85e172a1485654b
SHA256 f39942724143c684a3b227958581e5459a885f02aa23d4d577bd6dfcdff677c4
MD5 cfc7a72df79bffd37a2a5504ffe0ce43
SHA1 43bcbef1c3f312d23b221378cef555043bef312a
SHA512 5a9cd34e9fa8bcdaed2aee5e1dccb092e00b3fccda6d5d0a27879a5217611609893d9c5428c86a6b49fffd24914ffbae6bc50d1160ed4828f6a3da2a32f76d1f
SSDEEP 196608:E7bbzzIcHLXNJETDvQuUzalHRMgnP5K6lAcQqaVTzjUHdvoV:OfNbNJEia1RMgxmctyzj2V
TLSH
T18096026D880C50F8FA25D8F1DE9B3793DE1BF4930BB21747122F4299CC8E942679266D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

19668

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileW WriteFile CloseHandle GetLastError MultiByteToWideChar SetLastError HeapAlloc HeapFree GetProcessHeap GetNativeSystemInfo VirtualAlloc VirtualProtect VirtualFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr SetEvent ReleaseSemaphore ReleaseMutex WaitForSingleObject CreateMutexA CreateEventA Sleep WaitForMultipleObjects CreateThread CreateSemaphoreA WriteConsoleW HeapSize GetFileSizeEx GetConsoleOutputCP FlushFileBuffers GetStringTypeW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc SetFilePointerEx QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess RtlPcToFileHeader RaiseException RtlUnwindEx EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType GetConsoleMode

user32

DefWindowProcW GetMessageW CreateWindowExW ShowWindow ShutdownBlockReasonCreate DispatchMessageW TranslateMessage RegisterClassW ShutdownBlockReasonDestroy

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-12_cfc7a72df79bffd37a2a5504ffe0ce43_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

generic