2026-08-25_65cd9b10cd7cf42c79c2ed35db1f2a75_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-25_65cd9b10cd7cf42c79c2ed35db1f2a75_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 1.8MB
Sample260826-23lbssfg49
SHA256 4963a8d17d0c6e9f6dfa6a2b109f6c13a5905850151276e863172f036cd23cad
MD5 65cd9b10cd7cf42c79c2ed35db1f2a75
SHA1 e4d071e0c53622ece0edff47b6e5ac120cda0d27
SHA512 3180debe7da9a2aa3d1a10d1d198bbdce606c0015b9b4a452d2b305d40e62d83c4e8a0ba77b25621e43bc680ad982f86c04c5d463366192c9bcf3ad396c46bf5
SSDEEP 12288:LEV4Lf4JYkm31ujyHTW+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpm:QKLFkmFmiyyxknw4FYnshx8OfVe247
TLSH
T14E85E055B3D501F8E4B78138CA561A03F7B2B4560320D7DB53ACE6792F23AE06A3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-25_65cd9b10cd7cf42c79c2ed35db1f2a75_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-25_65cd9b10cd7cf42c79c2ed35db1f2a75_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 1.8MB

2026-08-25_65cd9b10cd7cf42c79c2ed35db1f2a75_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH d9691b1160321cdee937235f2004965f
SHA256 4963a8d17d0c6e9f6dfa6a2b109f6c13a5905850151276e863172f036cd23cad
MD5 65cd9b10cd7cf42c79c2ed35db1f2a75
SHA1 e4d071e0c53622ece0edff47b6e5ac120cda0d27
SHA512 3180debe7da9a2aa3d1a10d1d198bbdce606c0015b9b4a452d2b305d40e62d83c4e8a0ba77b25621e43bc680ad982f86c04c5d463366192c9bcf3ad396c46bf5
SSDEEP 12288:LEV4Lf4JYkm31ujyHTW+hxfN6V7xjGDjWpbRYOypsu8xdaOv4GVvGr0ZJFXxogpm:QKLFkmFmiyyxknw4FYnshx8OfVe247
TLSH
T14E85E055B3D501F8E4B78138CA561A03F7B2B4560320D7DB53ACE6792F23AE06A3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

187696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

MultiByteToWideChar GetLastError QueryPerformanceFrequency WideCharToMultiByte QueryPerformanceCounter GetTickCount EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CloseHandle IsProcessorFeaturePresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetEndOfFile RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader CreateDirectoryW CreateFileW GetDriveTypeW GetFileInformationByHandle GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime FileTimeToSystemTime DeleteFileW RemoveDirectoryW MoveFileExW ReadFile ExitProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetCurrentDirectoryW GetFullPathNameW SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStringTypeW GetProcessHeap GetTimeZoneInformation HeapSize WriteConsoleW

Name

.text

Size

308KB

Virtual Size

308KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

98KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-25_65cd9b10cd7cf42c79c2ed35db1f2a75_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

kernel32

generic