2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom

General

Target
2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 73.5MB
Sample260905-v467bswwft
SHA256 1ee6aac0c386494070152115da2dd8269edccfddacad218e6821104dd26961a7
MD5 17daf1ec30136464b7a505bda1d0b053
SHA1 e47705ac8bd7ca29e8ebd39b8cd890e8738757f3
SHA512 1ca70e64e742174c6e75e06532add525629d7cf54fb9be22c8312acf9b8a8255407dd249fae75a08da8a247aa58d625600034dda31f8049e937e4616a07d84e7
SSDEEP 1572864:qycmwtsv06kqI2l1KeKYybdwwEcptmOxAI/gsjGmkfp1:qycTtS06kAGtu5KzXjFkj
TLSH
T18DF73340EC0AE1FCE72062FA04D3F1D8CB1C7AB95EE597129652D13BEE168751EB1722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 73.5MB

2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH a5f9cdbffd6a5d1b3bcdb1666b574a0c
SHA256 1ee6aac0c386494070152115da2dd8269edccfddacad218e6821104dd26961a7
MD5 17daf1ec30136464b7a505bda1d0b053
SHA1 e47705ac8bd7ca29e8ebd39b8cd890e8738757f3
SHA512 1ca70e64e742174c6e75e06532add525629d7cf54fb9be22c8312acf9b8a8255407dd249fae75a08da8a247aa58d625600034dda31f8049e937e4616a07d84e7
SSDEEP 1572864:qycmwtsv06kqI2l1KeKYybdwwEcptmOxAI/gsjGmkfp1:qycTtS06kAGtu5KzXjFkj
TLSH
T18DF73340EC0AE1FCE72062FA04D3F1D8CB1C7AB95EE597129652D13BEE168751EB1722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetEnvironmentVariableA CloseHandle Sleep GetModuleFileNameA GetModuleHandleA GetProcAddress QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW VirtualProtect LoadLibraryExW LCMapStringW GetProcessHeap SetFilePointerEx HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode CreateFileW

Name

.text

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom

kernel32

generic