2026-08-19_5eda6e2eade8723cbaacd9c364bba6aa_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-08-19_5eda6e2eade8723cbaacd9c364bba6aa_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 356KB
Sample260820-b57dyaah49
SHA256 8f2bf3e258ee82f03bbb7d7ba61098fda1246f779c465fa8b41590a1757544c9
MD5 5eda6e2eade8723cbaacd9c364bba6aa
SHA1 7e455bd4cc01679831594c92f938013bab3adf5c
SHA512 21947a47dd617db0b00af85ca665552ddb52683937b06a0d5c9272b953851c7699aea1a447718ca068badb9f6a50cd01fcb145c53253b646b968a039c241268e
SSDEEP 6144:U9dL4b2RPg2OwAeaROM5iDC6ZHHgKI4hj+VYV:U9CU4RO4iVZHHgKfIu
TLSH
T11B748D26F79924F9E1778178C8160906DA727C990760ABCF23E04F961F67AD09F3D7A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_5eda6e2eade8723cbaacd9c364bba6aa_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-19_5eda6e2eade8723cbaacd9c364bba6aa_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 356KB

2026-08-19_5eda6e2eade8723cbaacd9c364bba6aa_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 31a221e94523f4395b85ba5463bc35b6
SHA256 8f2bf3e258ee82f03bbb7d7ba61098fda1246f779c465fa8b41590a1757544c9
MD5 5eda6e2eade8723cbaacd9c364bba6aa
SHA1 7e455bd4cc01679831594c92f938013bab3adf5c
SHA512 21947a47dd617db0b00af85ca665552ddb52683937b06a0d5c9272b953851c7699aea1a447718ca068badb9f6a50cd01fcb145c53253b646b968a039c241268e
SSDEEP 6144:U9dL4b2RPg2OwAeaROM5iDC6ZHHgKI4hj+VYV:U9CU4RO4iVZHHgKfIu
TLSH
T11B748D26F79924F9E1778178C8160906DA727C990760ABCF23E04F961F67AD09F3D7A0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

121712

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WriteConsoleW Sleep CreateFileW HeapSize SetStdHandle WideCharToMultiByte MultiByteToWideChar LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapReAlloc HeapFree GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap RtlUnwind

advapi32

GetUserNameA

dxgi

CreateDXGIFactory

wininet

InternetCheckConnectionW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_5eda6e2eade8723cbaacd9c364bba6aa_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

advapi32

dxgi

wininet

generic