2026-09-29_7deeb57fd16fe01541b03b2f7805cd3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

General

Target
2026-09-29_7deeb57fd16fe01541b03b2f7805cd3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
Size 289KB
Sample260930-xtncks1cnb
SHA256 46d65098d636308095cda040a24b0bd06dcda7b5a8a12161c593fe4be8999dd9
MD5 7deeb57fd16fe01541b03b2f7805cd3f
SHA1 7002f97b05d1ea90e4d05717d1f84b517bd0111d
SHA512 bd87413b52ff1c2dec5cf409b14b2e670e1fc08b97a9845943fbbc1e47523c5e961581123b34b89836ee0610cebe3bc6c4ec940ac5ba586588847d095eee5909
SSDEEP 3072:gPoxDNG8Nz/fl7qeFiMNe73IC9YNdLD43Ygcx4+41umZijuOU7tZEeuTShI1UxS8:O4NeEC6NdLD43YpxcRwrTCI1i1
TLSH
T1A7548D59B3A410FAF967923CCD514906EA72BC564760E7CF03A04AA63F277E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_7deeb57fd16fe01541b03b2f7805cd3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

File Explorer

2026-09-29_7deeb57fd16fe01541b03b2f7805cd3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

.exe 289KB

2026-09-29_7deeb57fd16fe01541b03b2f7805cd3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

IMPHASH 7c616c10821290429bc68e9f98d32017
SHA256 46d65098d636308095cda040a24b0bd06dcda7b5a8a12161c593fe4be8999dd9
MD5 7deeb57fd16fe01541b03b2f7805cd3f
SHA1 7002f97b05d1ea90e4d05717d1f84b517bd0111d
SHA512 bd87413b52ff1c2dec5cf409b14b2e670e1fc08b97a9845943fbbc1e47523c5e961581123b34b89836ee0610cebe3bc6c4ec940ac5ba586588847d095eee5909
SSDEEP 3072:gPoxDNG8Nz/fl7qeFiMNe73IC9YNdLD43Ygcx4+41umZijuOU7tZEeuTShI1UxS8:O4NeEC6NdLD43YpxcRwrTCI1i1
TLSH
T1A7548D59B3A410FAF967923CCD514906EA72BC564760E7CF03A04AA63F277E09E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

47676

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentProcess WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW CreateFileW RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx GetLastError SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW IsProcessorFeaturePresent WriteFile ExitProcess TerminateProcess FreeLibrary GetProcAddress GetCommandLineA GetCommandLineW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree OutputDebugStringW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetProcessHeap HeapSize RtlUnwind

Name

.text

Size

192KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_7deeb57fd16fe01541b03b2f7805cd3f_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc

kernel32

generic