2026-09-24_08c0cc588fd4790ad37fe308937c874b_cobalt-strike_icedid_luca-stealer_njrat_stealc

General

Target
2026-09-24_08c0cc588fd4790ad37fe308937c874b_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 284KB
Sample260924-e37hps1w7p
SHA256 29789dd2daff8b6d9082a9da24352f673e5895c641c5b6e2eb66a33ff0282341
MD5 08c0cc588fd4790ad37fe308937c874b
SHA1 9f3033838e468ff4c1455d10d6a8308e08c7caab
SHA512 bc1e533af7320afe86598cbefccf563cfd4d4f4b39ab6083358317ffe8aa007fdbdcf7849c747fe50644d27f25b22da366b76877c9b2a79202aa0589c779a8fd
SSDEEP 3072:6zpRkxs9tl7oFlUPv+YqAA2kHZ6ZPYq/mwwd8b7ZxFgd/1k76svOzdsZYitpA8vg:6zpSWZMFCPF452bbyd/SehkDpYBdX+
TLSH
T1F754AE56B3A540F9E1B7C238CD910A02F7B2B8160B619BDF07A447769F272D19D3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-24_08c0cc588fd4790ad37fe308937c874b_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-09-24_08c0cc588fd4790ad37fe308937c874b_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 284KB

2026-09-24_08c0cc588fd4790ad37fe308937c874b_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH bd1a80c65acd97e63d61c6b4acd35b54
SHA256 29789dd2daff8b6d9082a9da24352f673e5895c641c5b6e2eb66a33ff0282341
MD5 08c0cc588fd4790ad37fe308937c874b
SHA1 9f3033838e468ff4c1455d10d6a8308e08c7caab
SHA512 bc1e533af7320afe86598cbefccf563cfd4d4f4b39ab6083358317ffe8aa007fdbdcf7849c747fe50644d27f25b22da366b76877c9b2a79202aa0589c779a8fd
SSDEEP 3072:6zpRkxs9tl7oFlUPv+YqAA2kHZ6ZPYq/mwwd8b7ZxFgd/1k76svOzdsZYitpA8vg:6zpSWZMFCPF452bbyd/SehkDpYBdX+
TLSH
T1F754AE56B3A540F9E1B7C238CD910A02F7B2B8160B619BDF07A447769F272D19D3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

18876

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle CloseHandle GetLastError WaitForSingleObject Sleep CreateRemoteThread GetExitCodeThread OpenProcess VirtualAllocEx WriteProcessMemory VirtualFreeEx GetModuleFileNameW GetModuleHandleW GetProcAddress GetConsoleMode SetConsoleMode SetConsoleOutputCP CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW LocalFree FormatMessageA GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCPInfo WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree GetExitCodeProcess CreateProcessW HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetFileType GetStringTypeW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc

Name

.text

Size

124KB

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

91KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-24_08c0cc588fd4790ad37fe308937c874b_cobalt-strike_icedid_luca-stealer_njrat_stealc

kernel32

generic