260715-sh6ybsas9t_pw_infected.zip
- SHA256 ece11b7599b236bf0cb3e1b672264cb82412d30257da66ab510134bc0ba050b9
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_da48fcb833c225d0118e34426d677f07_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
General
- Target 260715-sh6ybsas9t_pw_infected.zip
- Size 372KB
- Sample260908-gpfh6ssflh
- SHA256 ece11b7599b236bf0cb3e1b672264cb82412d30257da66ab510134bc0ba050b9
- MD5 842f544153577582df6aac47938ccb8b
- SHA1 12832e9686c8c0ae26c594f53404801eb6530e1d
- SHA512 4500405c39fb71c0f7913ecfed29e6c1a7aeeb776068f546597cec08c7509780ec488412707c07fe87e221f09ffdff8c13e7f1a39b2dfe287b4cee7ed7d3aa5c
- SSDEEP 6144:j98+xJ9cUtzF3MlMKe+QXazyKgz/GI6tFG4oxkwu1t+9hF6KTIiMkrJhxm3TnIcK:S+xXtF8lDedazyK1llwuSv6K3Xdfm5K
- TLSH T18B8423C58FC7DBFF49897C693C4B1445BAC8B0A86758EA0D411640DADEA2CD60FCF19A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2026-07-15_da48fcb833c225d0118e34426d677f07_cobalt-strike_icedid_luca-stealer_njrat_satacom
File Explorer
-
260715-sh6ybsas9t_pw_infected.zip.zip 372KB
-
2026-07-15_da48fcb833c225d0118e34426d677f07_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe 777KB
2026-07-15_da48fcb833c225d0118e34426d677f07_cobalt-strike_icedid_luca-stealer_njrat_satacom
- IMPHASH abc0183748bf667b5e03cad4fd027395
- SHA256 033cdc85aec2ae5016c61134918860c6969761fdf95c55bb0d84c2e9c333c6a4
- MD5 da48fcb833c225d0118e34426d677f07
- SHA1 b58a63ae404b0274517070eaba92f391eb79ac0d
- SHA512 c6ffa16493b0eafbc2b4343b8243b9f777ebc36ec7a093c25240ad331e16136134fd890c0d0a281ea34b76bbd6620c72fed5a87da3853ec73b3ef3a8e5087228
- SSDEEP 12288:QmVqXbUES0+rfJQiRxLqmW4+zJhnqONGl:QmVqL7MeIxDW4KJRe
- TLSH T113058D1B62A441BCD0BBD2B0C9A71D47C7B2B84A5370EDAB07E019A21F675705B7F722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
infected
Minor OS version
0
Major OS version
6
Entry point
572768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ws2_32
setsockopt
freeaddrinfo
recv
WSAAddressToStringA
connect
send
WSAIoctl
select
WSACleanup
WSAStartup
closesocket
shutdown
getaddrinfo
socket
kernel32
FlushFileBuffers
CreateFileW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
VerSetConditionMask
GetModuleHandleW
VerifyVersionInfoW
GetSystemTimeAsFileTime
HeapFree
GetCurrentProcess
GetCurrentThreadId
CreateEventW
SetEvent
CloseHandle
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
GetLastError
SetFileTime
SetFilePointer
SystemTimeToFileTime
GetSystemTime
GetSystemDirectoryW
GetWindowsDirectoryW
GetProcAddress
GetTickCount
GetTempPathW
HeapSize
GetTempFileNameW
GetModuleHandleA
GetCurrentThread
GetSystemDirectoryA
ExitProcess
IsDebuggerPresent
QueryPerformanceFrequency
QueryPerformanceCounter
SetEnvironmentVariableW
Sleep
GetCurrentProcessId
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
TzSpecificLocalTimeToSystemTime
GetFileAttributesExW
DeleteProcThreadAttributeList
ReadFile
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
PeekNamedPipe
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetACP
IsValidCodePage
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
SetEndOfFile
WriteConsoleW
LocalFree
ReleaseSRWLockExclusive
GetConsoleOutputCP
GetTimeZoneInformation
HeapReAlloc
GetFileType
LCMapStringW
CompareStringW
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
SleepConditionVariableSRW
WaitForSingleObjectEx
GetExitCodeThread
WakeConditionVariable
WakeAllConditionVariable
SetUnhandledExceptionFilter
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
InitializeCriticalSectionEx
FindClose
FindFirstFileExW
FindNextFileW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleExW
IsProcessorFeaturePresent
TerminateProcess
GetModuleFileNameW
GetStdHandle
WriteFile
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
VirtualProtect
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
user32
wsprintfA
GetSystemMetrics
CloseWindowStation
wsprintfW
CloseDesktop
gdi32
GetDeviceCaps
DeleteDC
CreateDCW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
oleaut32
VariantInit
Name
.text
Size
721KB
Virtual Size
721KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
256B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=177, id=261, version=33145,
count=9, id=259, version=33145,
count=10, id=259, version=35403,
count=16, id=260, version=35403,
count=62, id=261, version=35403,
count=14, id=260, version=33145,
count=1, id=262, version=33145,
count=168, id=1, productName=Unmarked objects,
count=15, id=257, version=33145,
count=39, id=265, version=35730,
count=1, id=255, version=35730,
count=1, id=258, version=35730,