2026-08-15_e5f6591158dd294575ec7c1320034600_cobalt-strike_icedid_luca-stealer_njrat_satacom

General

Target
2026-08-15_e5f6591158dd294575ec7c1320034600_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 1.1MB
Sample260815-ben5nsda87
SHA256 c0b4a4af8a3a8c4b113d7f203fcf480cfac79160102490daf287748634b9ce23
MD5 e5f6591158dd294575ec7c1320034600
SHA1 8a58582e9553df2bbd311b6e5ed1ce8a53612188
SHA512 a8aa3088d2fe0c19e97c3c2104099e646ee86016991167f8b3d6570295835a60e5b7e1970f81daa772aef11dfa6cf4e847407cb202d1c30f859fce835e090400
SSDEEP 24576:XkfN1PEKGZhLMNqQTetP1dznLX2PfxHur4cXX7MH1SsnjT1709i:mdEK8vQitPrzCPfxHur4cnI1Ssfmi
TLSH
T16635E00B6D9AA1DDD323DDF8A6E40D19ED71E8103BD0EF8AA10036CA9D255FD7871632
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_e5f6591158dd294575ec7c1320034600_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-08-15_e5f6591158dd294575ec7c1320034600_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 1.1MB

2026-08-15_e5f6591158dd294575ec7c1320034600_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH 3afaace93f03bd11d7c996163983b5d4
SHA256 c0b4a4af8a3a8c4b113d7f203fcf480cfac79160102490daf287748634b9ce23
MD5 e5f6591158dd294575ec7c1320034600
SHA1 8a58582e9553df2bbd311b6e5ed1ce8a53612188
SHA512 a8aa3088d2fe0c19e97c3c2104099e646ee86016991167f8b3d6570295835a60e5b7e1970f81daa772aef11dfa6cf4e847407cb202d1c30f859fce835e090400
SSDEEP 24576:XkfN1PEKGZhLMNqQTetP1dznLX2PfxHur4cXX7MH1SsnjT1709i:mdEK8vQitPrzCPfxHur4cnI1Ssfmi
TLSH
T16635E00B6D9AA1DDD323DDF8A6E40D19ED71E8103BD0EF8AA10036CA9D255FD7871632
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

49840

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetEnvironmentVariableA SetEnvironmentVariableA GetTempPathA CloseHandle QueryPerformanceCounter QueryPerformanceFrequency HeapAlloc HeapFree GetProcessHeap ReleaseMutex WaitForSingleObject CreateMutexA Sleep GetCurrentProcessId GetCurrentThreadId GlobalMemoryStatusEx GetSystemInfo GetTickCount GetTickCount64 GetSystemDirectoryA GetModuleHandleA GetProcAddress LoadLibraryA lstrcpyA QueryFullProcessImageNameA WriteConsoleW CreateFileW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode

user32

CharUpperA GetCursorPos

Name

.text

Size

125KB

Virtual Size

124KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_e5f6591158dd294575ec7c1320034600_cobalt-strike_icedid_luca-stealer_njrat_satacom

kernel32

user32

generic