2026-08-24_d1926018401bfc9ee64506025251c1ea_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_d1926018401bfc9ee64506025251c1ea_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 1.3MB
Sample260825-appzaadn5t
SHA256 dd92cefacb0c50539993e84b8a43499ae0d47e60274788025a40086e6c975c4b
MD5 d1926018401bfc9ee64506025251c1ea
SHA1 f50c7b41805e545e5ee70eb847543ec41c753e8e
SHA512 53d90a117f82c63c2f04a37fc45c887c9ebf5d002887a14cf56470fedb214bf24fcb275b53eafbd27b5af138442f0a6d713c3a04777ef022e5fa1e8d046f0eae
SSDEEP 24576:a+bzDnz2aOmijk4cw27tLiNnrqOHFmIPv7K8:JHX2aLWk4dtNnrWIPf
TLSH
T1EA55C00AF3A541FCD077897CC9A3970BEA72B846032196EF13D45A595FA33F04A7A361
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-24_d1926018401bfc9ee64506025251c1ea_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-08-24_d1926018401bfc9ee64506025251c1ea_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 1.3MB

2026-08-24_d1926018401bfc9ee64506025251c1ea_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 81035036d34d83c99b28fb15b6eb8e5f
SHA256 dd92cefacb0c50539993e84b8a43499ae0d47e60274788025a40086e6c975c4b
MD5 d1926018401bfc9ee64506025251c1ea
SHA1 f50c7b41805e545e5ee70eb847543ec41c753e8e
SHA512 53d90a117f82c63c2f04a37fc45c887c9ebf5d002887a14cf56470fedb214bf24fcb275b53eafbd27b5af138442f0a6d713c3a04777ef022e5fa1e8d046f0eae
SSDEEP 24576:a+bzDnz2aOmijk4cw27tLiNnrqOHFmIPv7K8:JHX2aLWk4dtNnrWIPf
TLSH
T1EA55C00AF3A541FCD077897CC9A3970BEA72B846032196EF13D45A595FA33F04A7A361
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

565260

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

QueryPerformanceCounter WriteProcessMemory VirtualFree VirtualAlloc OpenProcess CreateToolhelp32Snapshot Sleep GetTickCount64 Process32NextW Process32FirstW CloseHandle LoadLibraryW Module32FirstW ReadProcessMemory GetModuleHandleW Module32NextW SetEndOfFile WriteConsoleW HeapSize CreateFileW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GlobalLock FreeLibrary GetFileAttributesExW CreateProcessW GetExitCodeProcess WaitForSingleObject HeapReAlloc GetFileSizeEx GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx GetProcAddress QueryPerformanceFrequency LoadLibraryA GlobalFree GlobalAlloc UnhandledExceptionFilter IsDebuggerPresent GetLocaleInfoA GetModuleHandleA GlobalUnlock WideCharToMultiByte FindClose MultiByteToWideChar RtlVirtualUnwind RtlCaptureContext GetCommandLineW GetCommandLineA WriteFile GetStdHandle GetModuleFileNameW TerminateProcess ExitProcess GetCurrentThreadId GetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree ReadFile GetModuleHandleExW IsProcessorFeaturePresent GetCurrentProcess RtlUnwind

user32

SetClipboardData OpenClipboard GetCursorPos EmptyClipboard CloseClipboard GetClipboardData SetCursorPos DefWindowProcW GetWindowRect CreateWindowExW GetSystemMetrics RegisterClassExW ShowWindow GetAsyncKeyState DispatchMessageW PeekMessageW SetWindowDisplayAffinity SetLayeredWindowAttributes TranslateMessage SetWindowLongW PostQuitMessage FindWindowA UpdateWindow GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture

comdlg32

GetOpenFileNameW

shell32

ShellExecuteW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

winmm

PlaySoundW

d3d11

D3D11CreateDeviceAndSwapChain

Name

.text

Size

750KB

Virtual Size

749KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

187KB

Virtual Size

186KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

311KB

Virtual Size

317KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-24_d1926018401bfc9ee64506025251c1ea_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

kernel32

user32

comdlg32

shell32

imm32

d3dcompiler_47

dwmapi

winmm

d3d11

generic