2026-08-18_4f5e3875baa419b7736f8205d16130c4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-18_4f5e3875baa419b7736f8205d16130c4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 1.4MB
Sample260818-fpjedsem4v
SHA256 0b9909b14138315cd2328c79c413a5f52e5ff6662690e2afdfb269eca857e451
MD5 4f5e3875baa419b7736f8205d16130c4
SHA1 916d98e6f0099227128e0ee817616f93c5f49903
SHA512 7a5c0e583397f1865bd37c8d505b4756a37b74744094a9f8fb87b2a4e9841e142f58136bd3d325cf33f95ea578e46defb8ee3edac4c37c16bf644205f0e14774
SSDEEP 24576:wAmIUdAtP/Rcrx38xH3LAxZdAOXMWP9PxqGIHCEQs:wAmKtPZqxkX8xwWPxxqGGCRs
TLSH
T11F65BE1AA7B805B9E0ABD274CD538507E376B8060771978F23D586A63F637A09F3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_4f5e3875baa419b7736f8205d16130c4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-18_4f5e3875baa419b7736f8205d16130c4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 1.4MB

2026-08-18_4f5e3875baa419b7736f8205d16130c4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 3c5578f87143b57f68cba7b7042a18dc
SHA256 0b9909b14138315cd2328c79c413a5f52e5ff6662690e2afdfb269eca857e451
MD5 4f5e3875baa419b7736f8205d16130c4
SHA1 916d98e6f0099227128e0ee817616f93c5f49903
SHA512 7a5c0e583397f1865bd37c8d505b4756a37b74744094a9f8fb87b2a4e9841e142f58136bd3d325cf33f95ea578e46defb8ee3edac4c37c16bf644205f0e14774
SSDEEP 24576:wAmIUdAtP/Rcrx38xH3LAxZdAOXMWP9PxqGIHCEQs:wAmKtPZqxkX8xwWPxxqGGCRs
TLSH
T11F65BE1AA7B805B9E0ABD274CD538507E376B8060771978F23D586A63F637A09F3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

446328

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Sleep GetCurrentProcessId CreateFileMappingW MapViewOfFile UnmapViewOfFile GetProcAddress LoadLibraryW GetTempPathW DecodePointer HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap InitializeCriticalSectionEx DeleteCriticalSection CreateProcessW GetTickCount GetModuleFileNameW GetModuleHandleW ReadFile WaitNamedPipeW GetCurrentProcess TerminateProcess GetModuleHandleA WritePrivateProfileStringW GetPrivateProfileStringW LoadResource LockResource SizeofResource FindResourceW GetFileAttributesW FreeLibrary LoadLibraryExW MultiByteToWideChar GetProcessTimes GetSystemTimeAsFileTime IsWow64Process SetLastError GetFileSizeEx WaitForSingleObject ResumeThread CreateDirectoryW LocalFree SetEndOfFile WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetLastError CloseHandle WriteFile LoadLibraryA CreateFileW GetCommandLineA GetOEMCP GetACP IsValidCodePage ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetStdHandle ExitProcess ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FormatMessageA GetLocaleInfoEx WideCharToMultiByte GetStringTypeW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx WaitForSingleObjectEx GetExitCodeThread EncodePointer EnterCriticalSection LeaveCriticalSection QueryPerformanceCounter CompareStringEx GetCPInfo LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RaiseException RtlPcToFileHeader RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW RtlUnwind

user32

SetProcessDPIAware MessageBoxW MessageBoxA

advapi32

SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW ConvertStringSidToSidW

shell32

ShellExecuteW SHGetFolderPathW

ole32

CoInitializeEx CoUninitialize

oleaut32

SysAllocString SysFreeString SafeArrayCreate SafeArrayAccessData SafeArrayUnaccessData VariantInit

mscoree

CorBindToRuntime CLRCreateInstance

wininet

InternetReadFile InternetOpenUrlA InternetOpenA HttpQueryInfoA

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

winmm

PlaySoundW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-18_4f5e3875baa419b7736f8205d16130c4_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

user32

advapi32

shell32

ole32

oleaut32

mscoree

wininet

version

winmm

generic