2026-08-31_7015254b2fcb6abbfbf211882da599d9_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-08-31_7015254b2fcb6abbfbf211882da599d9_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar
Size 41.5MB
Sample260831-xdncmsab42
SHA256 4e69ed0ec8eb64688370183d758d15a5cc82fcf336a8cfe58e241f23ffb6930b
MD5 7015254b2fcb6abbfbf211882da599d9
SHA1 cf4cbefe6b2e8420826caf73996ff809ccb97c73
SHA512 53d9da775fc70873aa8570bf9d7ec0dd332948c7c6fe60ab966d00ada29b8e3f4c2c254353473ee129166bdd1f318d8b332f2f1e94fbf6142617de847eb40cca
SSDEEP 786432:ahVyz9t+OP4jVVUhXVOkqldvhfuietBWfxtKRsM+ux3TmD3zftbzNQW6YOdRtzmB:GSVaVVUhFOkul4t4D236Djf1zK+ZZ5
TLSH
T1A5973348168900D9E177F73465AB1300D1FEBE37DA902CFF095079F2DE767AA8A262D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_7015254b2fcb6abbfbf211882da599d9_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-08-31_7015254b2fcb6abbfbf211882da599d9_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

.exe 41.5MB

2026-08-31_7015254b2fcb6abbfbf211882da599d9_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH d2a839c4adf74b6acdcc3f32de0e19b9
SHA256 4e69ed0ec8eb64688370183d758d15a5cc82fcf336a8cfe58e241f23ffb6930b
MD5 7015254b2fcb6abbfbf211882da599d9
SHA1 cf4cbefe6b2e8420826caf73996ff809ccb97c73
SHA512 53d9da775fc70873aa8570bf9d7ec0dd332948c7c6fe60ab966d00ada29b8e3f4c2c254353473ee129166bdd1f318d8b332f2f1e94fbf6142617de847eb40cca
SSDEEP 786432:ahVyz9t+OP4jVVUhXVOkqldvhfuietBWfxtKRsM+ux3TmD3zftbzNQW6YOdRtzmB:GSVaVVUhFOkul4t4D236Djf1zK+ZZ5
TLSH
T1A5973348168900D9E177F73465AB1300D1FEBE37DA902CFF095079F2DE767AA8A262D4
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

51444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW

kernel32

EnterCriticalSection WriteConsoleW CreateDirectoryW SizeofResource SetConsoleCtrlHandler GetCommandLineW WriteFile TerminateProcess GetModuleFileNameW SetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapReAlloc RtlUnwindEx SetLastError LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA GetStdHandle HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_7015254b2fcb6abbfbf211882da599d9_cobalt-strike_coinminer_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic