2026-08-23_a9791528a0b6448498c9a132c9b82c49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-23_a9791528a0b6448498c9a132c9b82c49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 23.4MB
Sample260824-cl189ascld
SHA256 e97efa1c3e95da87762204a54a72cd460f5604fe8f7fc956bcadb486bee541fb
MD5 a9791528a0b6448498c9a132c9b82c49
SHA1 1918a9c2e4859035a292c37558349284d3cf7e55
SHA512 d535ff2d5c63e4a5d16cc8266cd662f0c0aec0057d83b044341f59c601869b51b9e302f2c405f9379f63286cdff6410faaa9f030bf54ff990bba676a1efba0ac
SSDEEP 393216:kKTtcWqtdjx4CF7g8LE+qIQMmzvC6naS1edWZcbKAoj+Fg1gj6+12eR:jWWk467JLDFQMmDC6nay7ZcOuFCK662Q
TLSH
T1C937334BD5110459DC2781784B62C93AB6353C282F6066A377E87C6F7FB32ED9DE6202
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-23_a9791528a0b6448498c9a132c9b82c49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-08-23_a9791528a0b6448498c9a132c9b82c49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 23.4MB

2026-08-23_a9791528a0b6448498c9a132c9b82c49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH e45af9c347b83a84a744c58194d34472
SHA256 e97efa1c3e95da87762204a54a72cd460f5604fe8f7fc956bcadb486bee541fb
MD5 a9791528a0b6448498c9a132c9b82c49
SHA1 1918a9c2e4859035a292c37558349284d3cf7e55
SHA512 d535ff2d5c63e4a5d16cc8266cd662f0c0aec0057d83b044341f59c601869b51b9e302f2c405f9379f63286cdff6410faaa9f030bf54ff990bba676a1efba0ac
SSDEEP 393216:kKTtcWqtdjx4CF7g8LE+qIQMmzvC6naS1edWZcbKAoj+Fg1gj6+12eR:jWWk467JLDFQMmDC6nay7ZcOuFCK662Q
TLSH
T1C937334BD5110459DC2781784B62C93AB6353C282F6066A377E87C6F7FB32ED9DE6202
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

375600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\EitherPlay\Documents\PROGRAMACION2\Descargador2026\x64\Release\Descargador2026.pdb

kernel32

OpenProcess CreateToolhelp32Snapshot Sleep GetTempPathA GetTickCount64 GetFileAttributesA Process32NextW CreateFileA DeleteFileA GlobalAlloc Process32FirstW GlobalFree CloseHandle CreateThread GlobalLock ExitProcess GlobalMemoryStatusEx CreateProcessA GetSystemTimeAsFileTime CreateDirectoryA SetProcessWorkingSetSize GlobalUnlock GetComputerNameA WideCharToMultiByte SetEndOfFile WriteConsoleW HeapReAlloc HeapSize CreateFileW GetStringTypeW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileSizeEx GetConsoleOutputCP FlushFileBuffers GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx GetFileAttributesExW CreateProcessW GetFileAttributesW WaitForSingleObject LCMapStringW CompareStringW GetVolumeInformationA GetEnvironmentVariableA OutputDebugStringA GetCurrentProcess SetPriorityClass GetFileAttributesExA CreateDirectoryW QueryPerformanceCounter FreeLibrary GetProcAddress LoadLibraryExW VirtualProtect HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent IsDBCSLeadByte QueryPerformanceFrequency WriteFile GetStdHandle GetModuleFileNameW TerminateProcess ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry LoadLibraryA MultiByteToWideChar GetLocaleInfoA GetExitCodeProcess ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetSystemTimePreciseAsFileTime TryAcquireSRWLockExclusive GetLastError

user32

GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture ScreenToClient GetMessageExtraInfo GetKeyState DefWindowProcW PostQuitMessage GetForegroundWindow SetLayeredWindowAttributes MessageBoxA PeekMessageW DispatchMessageW GetAsyncKeyState ShowWindow RegisterClassExW CreateWindowExW SetWindowRgn SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard LoadCursorW SetCapture GetCursorPos TranslateMessage SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor

gdi32

DeleteObject CreateRoundRectRgn

advapi32

RegQueryValueExA RegSetValueExA RegCreateKeyExA RegCloseKey RegOpenKeyExA

shell32

SHGetFolderPathW ShellExecuteExA ShellExecuteW ShellExecuteA

ole32

CoCreateInstance CreateStreamOnHGlobal CoUninitialize CoInitialize

winmm

waveOutSetVolume PlaySoundW PlaySoundA

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdipGetImageGraphicsContext GdipBitmapLockBits GdipImageSelectActiveFrame GdipFree GdipDeleteGraphics GdipDrawImageRectI GdipAlloc GdipBitmapUnlockBits GdipCloneImage GdipGetImageHeight GdiplusShutdown GdiplusStartup GdipGetImageWidth GdipCreateBitmapFromScan0 GdipLoadImageFromStream GdipDisposeImage GdipImageGetFrameCount

wininet

InternetCloseHandle InternetOpenA InternetReadFile InternetOpenUrlA

urlmon

URLDownloadToFileW URLDownloadToFileA

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

Name

.text

Size

517KB

Virtual Size

516KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.1MB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16.2MB

Virtual Size

16.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

532KB

Virtual Size

532KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-23_a9791528a0b6448498c9a132c9b82c49_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

d3dcompiler_47

dwmapi

d3d11

gdiplus

wininet

urlmon

imm32

generic