2026-09-30_58da2608cd2d8d0e0d7c496202ea2477_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-09-30_58da2608cd2d8d0e0d7c496202ea2477_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 12.1MB
Sample261001-rbkk3stses
SHA256 55317deaff572e877f05ec29b9286accbda249155f8e2a01e0a833b6900fdb05
MD5 58da2608cd2d8d0e0d7c496202ea2477
SHA1 1e30bad8aa48574b1d4ab9c99a6754d983997204
SHA512 51fd771551e20f10d681f14dadb517126da10acf273ecf7087bf258241b6e45e57b368388d40cd68e33fb7da06c8338938e43950c674ead43f93097ecf6387e4
SSDEEP 196608:Zu0Ciy2vhvcciQ5oMert4hb4VyaeYe4Wv9eadwKmLZiD49uHvVkM86lIT4PVQgZ/:PZhvcxQachMleh12LZK4YtkJyIup/
TLSH
T1CDD63338F74218B7E2874974956326C7F7AFF5251B12C67797901EB2BF22E60083A742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-30_58da2608cd2d8d0e0d7c496202ea2477_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-09-30_58da2608cd2d8d0e0d7c496202ea2477_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 12.1MB

2026-09-30_58da2608cd2d8d0e0d7c496202ea2477_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH 77b4cdb48b01d95720e6b1d42c83677f
SHA256 55317deaff572e877f05ec29b9286accbda249155f8e2a01e0a833b6900fdb05
MD5 58da2608cd2d8d0e0d7c496202ea2477
SHA1 1e30bad8aa48574b1d4ab9c99a6754d983997204
SHA512 51fd771551e20f10d681f14dadb517126da10acf273ecf7087bf258241b6e45e57b368388d40cd68e33fb7da06c8338938e43950c674ead43f93097ecf6387e4
SSDEEP 196608:Zu0Ciy2vhvcciQ5oMert4hb4VyaeYe4Wv9eadwKmLZiD49uHvVkM86lIT4PVQgZ/:PZhvcxQachMleh12LZK4YtkJyIup/
TLSH
T1CDD63338F74218B7E2874974956326C7F7AFF5251B12C67797901EB2BF22E60083A742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53044

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError CloseHandle GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA QueryPerformanceCounter SetDllDirectoryW LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW HeapSize RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-30_58da2608cd2d8d0e0d7c496202ea2477_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic