2026-09-30_0b26512e064491347b5afa3beb006f3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-30_0b26512e064491347b5afa3beb006f3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 338KB
Sample260930-resqvstfna
SHA256 2fd4df25928fa2239d40696c67e638ddb1e10a070a3d9726864a498f68d8559a
MD5 0b26512e064491347b5afa3beb006f3b
SHA1 a9ac1fb06f9deca4acd26407404c27c5b03f578d
SHA512 8a3a30acef738ea176c43e28b68682a53cf695a5369827becc8acbe07e8ac6249333a89b55a38316fc6eae8ee4a9cc20eb03205c086d652fa27990c46d8fef10
SSDEEP 6144:BjiX/saXbtZQ5OZvsVokE+048/ron/4+LO:B2X0Y5ZzlsVok0ron/
TLSH
T1D8747E1AFB6514F9E5A7D178CD024906FB72BC4647B0E75F23A00A972F23760AE2E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_0b26512e064491347b5afa3beb006f3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-09-30_0b26512e064491347b5afa3beb006f3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 338KB

2026-09-30_0b26512e064491347b5afa3beb006f3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 37c7f1a35356d216199a73f95bd2f85a
SHA256 2fd4df25928fa2239d40696c67e638ddb1e10a070a3d9726864a498f68d8559a
MD5 0b26512e064491347b5afa3beb006f3b
SHA1 a9ac1fb06f9deca4acd26407404c27c5b03f578d
SHA512 8a3a30acef738ea176c43e28b68682a53cf695a5369827becc8acbe07e8ac6249333a89b55a38316fc6eae8ee4a9cc20eb03205c086d652fa27990c46d8fef10
SSDEEP 6144:BjiX/saXbtZQ5OZvsVokE+048/ron/4+LO:B2X0Y5ZzlsVok0ron/
TLSH
T1D8747E1AFB6514F9E5A7D178CD024906FB72BC4647B0E75F23A00A972F23760AE2E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

69624

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

winhttp

WinHttpConnect WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpOpen WinHttpQueryDataAvailable WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle

kernel32

WriteConsoleW CreateFileW HeapSize HeapReAlloc SetStdHandle GetProcessHeap ReadFile SetEndOfFile WaitForSingleObject Sleep GetLastError CloseHandle CreateProcessW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA CreatePipe RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead QueryPerformanceFrequency WideCharToMultiByte MultiByteToWideChar GetStringTypeW InitializeCriticalSectionEx GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer RtlUnwind LCMapStringEx GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile HeapAlloc HeapFree GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP

shell32

SHGetFolderPathW

wininet

InternetGetConnectedState

crypt32

CryptBinaryToStringA

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_0b26512e064491347b5afa3beb006f3b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

winhttp

kernel32

shell32

wininet

crypt32

generic