2026-08-31_6bed180cc295a839cb2013eefff2446b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-08-31_6bed180cc295a839cb2013eefff2446b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 387KB
Sample260831-xp6ncsem8w
SHA256 b2eed3dbe3ee13d4ec44625cb9c78cacfc23a4c9c09b3e52085ff3e0f759599b
MD5 6bed180cc295a839cb2013eefff2446b
SHA1 8555891e00a35fa7e6b7c050f1fdf7aa01434959
SHA512 1b9766f718c60b062a4e644246735deac4fc05f361576a5344524203263bec033233d24feef83db66a1e40df6a4345de40e341d4cfb528715b300dd5ceecfb63
SSDEEP 6144:it/kStlnixpMhZWJrTQM/EV5KVslgLpNHMYohaRB+XoAm:itHEnEeTQM/kKVs0vLo8M
TLSH
T1DD844A1AFAA500F0D1B6C03DC992651AF9B138AA43709BDB67954B570F337E4AD3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-31_6bed180cc295a839cb2013eefff2446b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-08-31_6bed180cc295a839cb2013eefff2446b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 387KB

2026-08-31_6bed180cc295a839cb2013eefff2446b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH eb285d0a2c42f2a2749291322cbec9e3
SHA256 b2eed3dbe3ee13d4ec44625cb9c78cacfc23a4c9c09b3e52085ff3e0f759599b
MD5 6bed180cc295a839cb2013eefff2446b
SHA1 8555891e00a35fa7e6b7c050f1fdf7aa01434959
SHA512 1b9766f718c60b062a4e644246735deac4fc05f361576a5344524203263bec033233d24feef83db66a1e40df6a4345de40e341d4cfb528715b300dd5ceecfb63
SSDEEP 6144:it/kStlnixpMhZWJrTQM/EV5KVslgLpNHMYohaRB+XoAm:itHEnEeTQM/kKVs0vLo8M
TLSH
T1DD844A1AFAA500F0D1B6C03DC992651AF9B138AA43709BDB67954B570F337E4AD3EB10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

116892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

user32

SendInput CallNextHookEx UnhookWindowsHookEx SetWindowsHookExA SetForegroundWindow GetForegroundWindow GetMessageA

kernel32

TlsGetValue WriteConsoleW HeapSize CreateFileW SetStdHandle GetProcessHeap SetEnvironmentVariableW CloseHandle GetLastError CreateProcessA WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead FreeEnvironmentStringsW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError TlsAlloc SetEndOfFile TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlUnwind ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW CreateDirectoryW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-31_6bed180cc295a839cb2013eefff2446b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

user32

kernel32

generic