2026-10-10_3f76e41b73ed5c95c060ee986f854c0a_cobalt-strike_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-10_3f76e41b73ed5c95c060ee986f854c0a_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 471KB
Sample261011-tpem4ada37
SHA256 17596baf23792169c6e239791ce81bb583e6ea9a2539e933b81a3f8ec094545e
MD5 3f76e41b73ed5c95c060ee986f854c0a
SHA1 c52470810aeed2ae98fa8dc5e930335238f44971
SHA512 9975fbdd4ce12f8c55fc41ae0dd68f2b3c21c3dfef2e9a3f0df1c69708efa66c8554a51f6b9bfd0de280b7cc44db6685c1d86f5b082c1feb592d9294e1787514
SSDEEP 6144:ejn98+X2rzif2QqzAAZ0z6WQ3r25KVxy6hnV7f/Ah7DB8i:Tzi8DQ6WQ3r2EbRtV7f2
TLSH
T18EA48E66B29441F9E1B7C138CE464903E772784A0760ABEF03E4DAB51F279E54E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-10_3f76e41b73ed5c95c060ee986f854c0a_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-10_3f76e41b73ed5c95c060ee986f854c0a_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 471KB

2026-10-10_3f76e41b73ed5c95c060ee986f854c0a_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 70e17e984856981fef2b0bee4171b1e3
SHA256 17596baf23792169c6e239791ce81bb583e6ea9a2539e933b81a3f8ec094545e
MD5 3f76e41b73ed5c95c060ee986f854c0a
SHA1 c52470810aeed2ae98fa8dc5e930335238f44971
SHA512 9975fbdd4ce12f8c55fc41ae0dd68f2b3c21c3dfef2e9a3f0df1c69708efa66c8554a51f6b9bfd0de280b7cc44db6685c1d86f5b082c1feb592d9294e1787514
SSDEEP 6144:ejn98+X2rzif2QqzAAZ0z6WQ3r25KVxy6hnV7f/Ah7DB8i:Tzi8DQ6WQ3r2EbRtV7f2
TLSH
T18EA48E66B29441F9E1B7C138CE464903E772784A0760ABEF03E4DAB51F279E54E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

202140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ole32

CoCreateInstance CoInitializeEx CoUninitialize

kernel32

RtlLookupFunctionEntry SetEndOfFile WriteConsoleW HeapSize GetLastError GetModuleHandleW GetProcAddress LoadLibraryExW LocalFree FormatMessageA GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFinalPathNameByHandleW AreFileApisANSI CloseHandle GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx QueryPerformanceCounter GetSystemTimeAsFileTime GetStringTypeW GetCPInfo RtlCaptureContext RtlUnwind RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetProcessHeap RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle

Name

.text

Size

341KB

Virtual Size

340KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-10_3f76e41b73ed5c95c060ee986f854c0a_cobalt-strike_icedid_luca-stealer_njrat_stealc

ole32

kernel32

generic