2026-09-04_889ef90d565d92dafe5535108ce3338c_cobalt-strike_icedid_luca-stealer_njrat

General

Target
2026-09-04_889ef90d565d92dafe5535108ce3338c_cobalt-strike_icedid_luca-stealer_njrat
Size 146KB
Sample260905-e32bpaen3z
SHA256 2bcedb7bab9021c141ed8698f7007a463cbf163464efa967af8b1fa742c8c8d6
MD5 889ef90d565d92dafe5535108ce3338c
SHA1 60e895521088952c1d448738e3218e9b2340e42a
SHA512 a0a619892b2f8dcb8aae72d9ec5f086068d1b07b61243b14b67a1b70dbfd33726de579bf8c7fdb1cbd196b89719fe704f01fd0817ae61b0b805f46852849e6aa
SSDEEP 3072:G61xoQd3ui2sJjMqX91UsUfyz+rA14cKUMwBHV/v/Z:GKoQVuiuWUs+yz8spdv/
TLSH
T10BE34A5BB7E130F9E1B7823889611606FB72787507605BEF07A446762F232E09D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_889ef90d565d92dafe5535108ce3338c_cobalt-strike_icedid_luca-stealer_njrat

File Explorer

2026-09-04_889ef90d565d92dafe5535108ce3338c_cobalt-strike_icedid_luca-stealer_njrat

.exe 146KB

2026-09-04_889ef90d565d92dafe5535108ce3338c_cobalt-strike_icedid_luca-stealer_njrat

IMPHASH 4b8f30bf388c8202ad832f78c91f5b2e
SHA256 2bcedb7bab9021c141ed8698f7007a463cbf163464efa967af8b1fa742c8c8d6
MD5 889ef90d565d92dafe5535108ce3338c
SHA1 60e895521088952c1d448738e3218e9b2340e42a
SHA512 a0a619892b2f8dcb8aae72d9ec5f086068d1b07b61243b14b67a1b70dbfd33726de579bf8c7fdb1cbd196b89719fe704f01fd0817ae61b0b805f46852849e6aa
SSDEEP 3072:G61xoQd3ui2sJjMqX91UsUfyz+rA14cKUMwBHV/v/Z:GKoQVuiuWUs+yz8spdv/
TLSH
T10BE34A5BB7E130F9E1B7823889611606FB72787507605BEF07A446762F232E09D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

13568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CloseHandle CreateFileW

Name

.text

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_889ef90d565d92dafe5535108ce3338c_cobalt-strike_icedid_luca-stealer_njrat

kernel32

generic