2026-09-21_5969ea6f0abd75845e7285bb467eccc8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-21_5969ea6f0abd75845e7285bb467eccc8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 6.0MB
Sample260922-qa75bafa48
SHA256 350ba422422af7ea41f4602225dad4edf0bffcf36d6548adbc29186983b9f3d2
MD5 5969ea6f0abd75845e7285bb467eccc8
SHA1 05047a15de1219c6a7c243ef8b0be00d9778988b
SHA512 b7d65be6278796cab12d27fb234ae1effdf9601082672d24e8f8858a74fb066bba1875d25938f79c99f414ef514d5815afe750d1387602ee0a539ad0119f27df
SSDEEP 98304:l6TUCrHX5rNL7IdvRK5f7HZjvXzxp46+aswaNKaSh2EUSJI2q2Z:l6TTrHX5rNL7IBRK5fLx/zxpY/kgSJq
TLSH
T1F5561253B6A400FDD06BC17CCA56990BEB72384507706ADF17E049A92FB7BE05E7A312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-21_5969ea6f0abd75845e7285bb467eccc8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-09-21_5969ea6f0abd75845e7285bb467eccc8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 6.0MB

2026-09-21_5969ea6f0abd75845e7285bb467eccc8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 053b2e3032c55f648ee94c3d2e5d6170
SHA256 350ba422422af7ea41f4602225dad4edf0bffcf36d6548adbc29186983b9f3d2
MD5 5969ea6f0abd75845e7285bb467eccc8
SHA1 05047a15de1219c6a7c243ef8b0be00d9778988b
SHA512 b7d65be6278796cab12d27fb234ae1effdf9601082672d24e8f8858a74fb066bba1875d25938f79c99f414ef514d5815afe750d1387602ee0a539ad0119f27df
SSDEEP 98304:l6TUCrHX5rNL7IdvRK5f7HZjvXzxp46+aswaNKaSh2EUSJI2q2Z:l6TTrHX5rNL7IBRK5fLx/zxpY/kgSJq
TLSH
T1F5561253B6A400FDD06BC17CCA56990BEB72384507706ADF17E049A92FB7BE05E7A312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

928652

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Aplikacje\Argus_Loader\Loader\x64\Release\ArgusLoader.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dxgi

CreateDXGIFactory1

winhttp

WinHttpCrackUrl WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen

bcrypt

BCryptHash BCryptDestroyKey BCryptDecrypt BCryptOpenAlgorithmProvider BCryptFinishHash BCryptDestroyHash BCryptGenerateSymmetricKey BCryptCreateHash BCryptSetProperty BCryptHashData BCryptCloseAlgorithmProvider

crypt32

CryptUnprotectData CryptStringToBinaryA CryptProtectData

ole32

CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoUninitialize CoCreateGuid

oleaut32

VariantInit SysAllocString SysFreeString VariantClear

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

kernel32

GetLocaleInfoW LCMapStringW VirtualProtect FlsFree FlsSetValue GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW FlsGetValue FlsAlloc GetConsoleOutputCP HeapReAlloc HeapAlloc HeapFree RtlUnwindEx InitializeSListHead GetStartupInfoW GetFileType ReadConsoleW GetConsoleMode SizeofResource OutputDebugStringA GetModuleFileNameW GetFileAttributesW Sleep GetLastError LockResource LoadResource FindResourceW ExitProcess GetModuleHandleW WideCharToMultiByte SetUnhandledExceptionFilter GetTempPathW MultiByteToWideChar CreateDirectoryW ReadFile WriteFile SetFilePointer CreateFileW DeleteFileW CloseHandle LocalFree GetFileSize FlushFileBuffers GlobalMemoryStatusEx GetFileSizeEx SetHandleInformation GetStdHandle TerminateProcess CreatePipe WaitForSingleObject GetCurrentThreadId GetTickCount64 SetFilePointerEx CreateProcessW GetExitCodeProcess LoadLibraryW GetProcAddress Thread32Next Thread32First OpenProcess CreateToolhelp32Snapshot Process32NextW K32GetProcessMemoryInfo GetUserDefaultLCID Process32FirstW GetProcessHeap FindFirstFileExW VirtualAllocEx CreateRemoteThread VirtualFreeEx GetCurrentProcess GetCurrentThread IsDebuggerPresent CheckRemoteDebuggerPresent GetCommandLineW MoveFileExW GetCurrentProcessId CopyFileW GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetModuleHandleA GetLocaleInfoA QueryPerformanceFrequency IsDBCSLeadByte VerSetConditionMask FreeLibrary QueryPerformanceCounter UnhandledExceptionFilter GetCPInfo LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError GetSystemTimeAsFileTime InitializeCriticalSectionEx GetStringTypeW SleepConditionVariableSRW WakeAllConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive InitOnceBeginInitialize InitOnceComplete GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent RaiseException IsValidLocale EnumSystemLocalesW SetStdHandle FindClose InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW FindNextFileW IsValidCodePage GetACP GetExitCodeThread GetOEMCP HeapSize SetEndOfFile WriteProcessMemory WriteConsoleW LoadLibraryA RtlUnwind

user32

MonitorFromWindow SetWindowLongPtrW EnumDisplayMonitors WindowFromPoint GetCapture GetMonitorInfoW ClientToScreen IsChild TrackMouseEvent GetKeyboardLayout GetForegroundWindow GetPropA SetLayeredWindowAttributes SetFocus BringWindowToTop SetCapture SetCursor SetWindowLongW GetClientRect IsWindowUnicode ReleaseCapture SetForegroundWindow IsIconic SetCursorPos SetPropA GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData GetWindowThreadProcessId IsWindowVisible GetClassNameA EnumWindows DefWindowProcW SetProcessDpiAwarenessContext DestroyWindow SetWindowPos MessageBoxW CreateWindowExW ScreenToClient GetSystemMetrics UnregisterClassW ShowWindow DispatchMessageW PeekMessageW TranslateMessage LoadIconW LoadCursorW PostQuitMessage UpdateWindow GetDpiForSystem GetMessageExtraInfo GetKeyState AdjustWindowRectEx GetWindowLongW GetDC ReleaseDC RegisterClassExW

gdi32

GetStockObject GetDeviceCaps

advapi32

RegOpenKeyExW RegQueryValueExW CryptAcquireContextW CryptGenRandom CryptReleaseContext RegCloseKey

shell32

ShellExecuteW CommandLineToArgvW SHGetFolderPathW

ntdll

RtlCaptureContext RtlPcToFileHeader RtlVirtualUnwind RtlLookupFunctionEntry

imm32

ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

256KB

Virtual Size

255KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

40KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4.6MB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-21_5969ea6f0abd75845e7285bb467eccc8_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

d3d11

d3dcompiler_47

dxgi

winhttp

bcrypt

crypt32

ole32

oleaut32

dwmapi

kernel32

user32

gdi32

advapi32

shell32

ntdll

imm32

generic