2026-09-06_606cf5e47f99ea1b97776d6bfd2ea623_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-09-06_606cf5e47f99ea1b97776d6bfd2ea623_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 6.3MB
Sample260907-ctd4paxbmd
SHA256 2eac11c1a495669731c71dcdd2c1063be1c4d8e83bc35a72ca99db0b29f663c6
MD5 606cf5e47f99ea1b97776d6bfd2ea623
SHA1 2fa8b54cfa1cf2b52a13a619faa57eaeee11e0e8
SHA512 80b4c8571fdfa2d03c966101dec277e4d4e01b3d87146311952b03eba346d82f0550a913ba2e07a88f1019da6b34ac95d87698e83830f1e44e7e3753d0050d24
SSDEEP 49152:JtCaDNgx0qZZdxe+7sUYFJVOHvfxahLu1XDyy/6WSQLGaClZfYjBDb8KHJPZNMbW:FNgxBJsdwfYdOglZ+BDZHJPZN/
TLSH
T1E8668D01E967D0E6C477C17947AA22A2F5703D090B2497D793D473A92E327F08AAF3D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-06_606cf5e47f99ea1b97776d6bfd2ea623_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-09-06_606cf5e47f99ea1b97776d6bfd2ea623_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 6.3MB

2026-09-06_606cf5e47f99ea1b97776d6bfd2ea623_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 4b27735a0f69b188d0accd72a75729aa
SHA256 2eac11c1a495669731c71dcdd2c1063be1c4d8e83bc35a72ca99db0b29f663c6
MD5 606cf5e47f99ea1b97776d6bfd2ea623
SHA1 2fa8b54cfa1cf2b52a13a619faa57eaeee11e0e8
SHA512 80b4c8571fdfa2d03c966101dec277e4d4e01b3d87146311952b03eba346d82f0550a913ba2e07a88f1019da6b34ac95d87698e83830f1e44e7e3753d0050d24
SSDEEP 49152:JtCaDNgx0qZZdxe+7sUYFJVOHvfxahLu1XDyy/6WSQLGaClZfYjBDb8KHJPZNMbW:FNgxBJsdwfYdOglZ+BDZHJPZN/
TLSH
T1E8668D01E967D0E6C477C17947AA22A2F5703D090B2497D793D473A92E327F08AAF3D9
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1985612

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\制作\00_制作中のゲーム\2026_ふたなり射精クリッカー（バカゲー）\プログラム\futaclick\x64\Release\futaclick.pdb

user32

SetWindowPos GetWindowRect GetFocus MessageBoxA

shlwapi

PathFileExistsA

kernel32

SetEndOfFile WriteConsoleW HeapSize FreeLibrary GetProcAddress LoadLibraryW LoadLibraryA CreateFileW ReadFile WriteFile CloseHandle GetLastError LocalAlloc LocalFree WideCharToMultiByte ExitProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetModuleFileNameW GetStdHandle HeapFree HeapAlloc GetFileType GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FlushFileBuffers MultiByteToWideChar FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW

advapi32

RegCloseKey

Name

.text

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

720KB

Virtual Size

719KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.0MB

Virtual Size

8.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

89KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

136KB

Virtual Size

136KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-06_606cf5e47f99ea1b97776d6bfd2ea623_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

user32

shlwapi

kernel32

advapi32

generic