2026-08-20_c1238d87e88fe56caf0640f69ab7ddbb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-08-20_c1238d87e88fe56caf0640f69ab7ddbb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 334KB
Sample260820-ywb8rsvblf
SHA256 f306f8e09c08ab4dbd161528a5943ce2a0e154e294a1bb3178104e7baa942ea9
MD5 c1238d87e88fe56caf0640f69ab7ddbb
SHA1 24e8c4a08322d49e1e9c24784914f2c3f90a6b9d
SHA512 666f3e0f4396811bb32b6d7e7f241c894f9305682c1fdf8084495310142d7b861bba3bdcb6168f6401afa28edcc9ea1081df7fcd5fffe83f4942a9b9bf591c1f
SSDEEP 6144:i+CpcbL3UZ6JQJ62ZXZhEb7Hcqh8lIFWoJoZGXkOiY:A6jyJ62tgb7Hb6+D7
TLSH
T153747D19F7A514FDE5678138C8424906E7B2BC1647A0E7CF23E04AA62F277D19E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_c1238d87e88fe56caf0640f69ab7ddbb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-20_c1238d87e88fe56caf0640f69ab7ddbb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 334KB

2026-08-20_c1238d87e88fe56caf0640f69ab7ddbb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 54569c3f7d41261d2a881e0eec8677f6
SHA256 f306f8e09c08ab4dbd161528a5943ce2a0e154e294a1bb3178104e7baa942ea9
MD5 c1238d87e88fe56caf0640f69ab7ddbb
SHA1 24e8c4a08322d49e1e9c24784914f2c3f90a6b9d
SHA512 666f3e0f4396811bb32b6d7e7f241c894f9305682c1fdf8084495310142d7b861bba3bdcb6168f6401afa28edcc9ea1081df7fcd5fffe83f4942a9b9bf591c1f
SSDEEP 6144:i+CpcbL3UZ6JQJ62ZXZhEb7Hcqh8lIFWoJoZGXkOiY:A6jyJ62tgb7Hb6+D7
TLSH
T153747D19F7A514FDE5678138C8424906E7B2BC1647A0E7CF23E04AA62F277D19E3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

93864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\danar\OneDrive\Рабочий стол\Sources\Add\carapuz\x64\Release\carapuz.pdb

kernel32

WaitForSingleObject CreateProcessA SetEndOfFile GetCurrentProcess CloseHandle Sleep GetModuleFileNameA WriteConsoleW HeapSize GetProcessHeap SetStdHandle LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesW GetFileAttributesExW SetFileInformationByHandle GetTempPathW AreFileApisANSI GetLastError GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WaitForSingleObjectEx GetExitCodeThread InitializeCriticalSectionEx GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW CreateThread ExitThread FreeLibraryAndExitThread SetConsoleCtrlHandler GetStdHandle WriteFile GetModuleFileNameW GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwind

advapi32

GetTokenInformation OpenProcessToken

shell32

SHGetFolderPathA ShellExecuteExA

urlmon

URLDownloadToFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_c1238d87e88fe56caf0640f69ab7ddbb_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

advapi32

shell32

urlmon

generic