2026-10-22_d90ef40603e65a52d27828a44043526e_cobalt-strike_icedid_luca-stealer_njrat_satacom

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_d90ef40603e65a52d27828a44043526e_cobalt-strike_icedid_luca-stealer_njrat_satacom
Size 168KB
Sample261023-wfd2baft7q
SHA256 2308adae5420a49cba4ea0f5ab33ea0072a9d2d5bdc49cfd2b74e684aacf5c80
MD5 d90ef40603e65a52d27828a44043526e
SHA1 a98e71e60fcbbf8248776310475a1da3611ef54b
SHA512 e4666e9cf2c4c6a240f15d79ec7f0e8994cc6a6a0acc26e27846cbfb01f87af834a3f6a104197980d72215673362871952b4d8933a3bef323c20d604a6f260f2
SSDEEP 3072:JCby3EPVLOlm8TEAerC9asvkSn1rD3UIo2YIfQ+2:n0PV6lLEPrCY4U+7f
TLSH
T18EF37C47B3E931F9E1B7863489614646FB73B8314721DA6F03A446752F232D09E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_d90ef40603e65a52d27828a44043526e_cobalt-strike_icedid_luca-stealer_njrat_satacom

File Explorer

2026-10-22_d90ef40603e65a52d27828a44043526e_cobalt-strike_icedid_luca-stealer_njrat_satacom

.exe 168KB

2026-10-22_d90ef40603e65a52d27828a44043526e_cobalt-strike_icedid_luca-stealer_njrat_satacom

IMPHASH ded17e8719adca5502813c50e7c5e8ac
SHA256 2308adae5420a49cba4ea0f5ab33ea0072a9d2d5bdc49cfd2b74e684aacf5c80
MD5 d90ef40603e65a52d27828a44043526e
SHA1 a98e71e60fcbbf8248776310475a1da3611ef54b
SHA512 e4666e9cf2c4c6a240f15d79ec7f0e8994cc6a6a0acc26e27846cbfb01f87af834a3f6a104197980d72215673362871952b4d8933a3bef323c20d604a6f260f2
SSDEEP 3072:JCby3EPVLOlm8TEAerC9asvkSn1rD3UIo2YIfQ+2:n0PV6lLEPrCY4U+7f
TLSH
T18EF37C47B3E931F9E1B7863489614646FB73B8314721DA6F03A446752F232D09E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BootstrapPackagedGame-Win64-Shipping.pdb

kernel32

WaitForSingleObject GetCurrentProcess GetExitCodeProcess CreateProcessW FreeLibrary GetModuleFileNameW GetModuleHandleW GetProcAddress GetLastError LoadResource LockResource SizeofResource FindResourceW WriteConsoleW CreateFileW CloseHandle GetFileAttributesW LoadLibraryExW GetEnvironmentVariableW HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlLookupFunctionEntry EncodePointer GetStdHandle WriteFile ExitProcess TerminateProcess GetModuleHandleExW IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc InitializeCriticalSectionAndSpinCount LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle

user32

MessageBoxW wsprintfW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

ShellExecuteExW

shlwapi

PathCanonicalizeW PathRemoveFileSpecW PathCombineW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_d90ef40603e65a52d27828a44043526e_cobalt-strike_icedid_luca-stealer_njrat_satacom

kernel32

user32

advapi32

shell32

shlwapi

version

generic