2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 387KB
Sample260815-d4e96syake
SHA256 f9c6fdefc31a76801f4950ff582a8f90670e817d0b149e7b0d54f95025633b66
MD5 8f4084605dec3d71c502a2212035c8d1
SHA1 f5d2ea27065b45fb23d8a83cfd112d3cd439648c
SHA512 254283b53d5efe78d759019091430238f73cb883ac186918aebaa99224f7e4aae5277f0c684f36fc589bab5e80652a482c0da7d1a25e55129f09d9e451f3fb57
SSDEEP 6144:/t/kStlnixpMhZWJrTQM/EV5KVslgLpNHMYohXRB+XoAm:/tHEnEeTQM/kKVs0vLoNM
TLSH
T128844A1AFAA500F0D1B6C03DC992651AF9B138AA43709BDB67954B570F337E4AD3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 387KB

2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH eb285d0a2c42f2a2749291322cbec9e3
SHA256 f9c6fdefc31a76801f4950ff582a8f90670e817d0b149e7b0d54f95025633b66
MD5 8f4084605dec3d71c502a2212035c8d1
SHA1 f5d2ea27065b45fb23d8a83cfd112d3cd439648c
SHA512 254283b53d5efe78d759019091430238f73cb883ac186918aebaa99224f7e4aae5277f0c684f36fc589bab5e80652a482c0da7d1a25e55129f09d9e451f3fb57
SSDEEP 6144:/t/kStlnixpMhZWJrTQM/EV5KVslgLpNHMYohXRB+XoAm:/tHEnEeTQM/kKVs0vLoNM
TLSH
T128844A1AFAA500F0D1B6C03DC992651AF9B138AA43709BDB67954B570F337E4AD3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

116892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SendInput CallNextHookEx UnhookWindowsHookEx SetWindowsHookExA SetForegroundWindow GetForegroundWindow GetMessageA

kernel32

TlsGetValue WriteConsoleW HeapSize CreateFileW SetStdHandle GetProcessHeap SetEnvironmentVariableW CloseHandle GetLastError CreateProcessA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead FreeEnvironmentStringsW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError TlsAlloc SetEndOfFile TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlUnwind ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW CreateDirectoryW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-15_8f4084605dec3d71c502a2212035c8d1_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

user32

kernel32

generic