2026-10-22_92f2008f1c37fd0de179f24f74dfdde9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_92f2008f1c37fd0de179f24f74dfdde9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 785KB
Sample261024-e4j4ssfx6t
SHA256 5d9c544bbc7fa09b623dfd54568142a1553e5b0e95e862bd603fddd8f086919d
MD5 92f2008f1c37fd0de179f24f74dfdde9
SHA1 811f34639cd40af69767c8ecbe574e40314bddff
SHA512 1917735c1f809d2505a0b7c2c0bdaf62e09e0a9551ece6b0dd5954ec4021c05d33c2c796157c17c6bde4ca0e0b644a4fcd228a400ceddf76cd40d9ce4881b170
SSDEEP 12288:sb87I/ywZjrYGtATjCrprzq0jliXvBKP6Indk8Gh1CeME+mln6Eo+IgG12mNQt:cwwZjXtGC0KSIdk8K8eMClnlwgG5E
TLSH
T1D205BF45B6B941F9D033A138D956B607EA763C09072097DB23E44A6D2F637E07E3B722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_92f2008f1c37fd0de179f24f74dfdde9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-10-22_92f2008f1c37fd0de179f24f74dfdde9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 785KB

2026-10-22_92f2008f1c37fd0de179f24f74dfdde9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH a377ef0663a00862d5ffcfaa0c31d82c
SHA256 5d9c544bbc7fa09b623dfd54568142a1553e5b0e95e862bd603fddd8f086919d
MD5 92f2008f1c37fd0de179f24f74dfdde9
SHA1 811f34639cd40af69767c8ecbe574e40314bddff
SHA512 1917735c1f809d2505a0b7c2c0bdaf62e09e0a9551ece6b0dd5954ec4021c05d33c2c796157c17c6bde4ca0e0b644a4fcd228a400ceddf76cd40d9ce4881b170
SSDEEP 12288:sb87I/ywZjrYGtATjCrprzq0jliXvBKP6Indk8Gh1CeME+mln6Eo+IgG12mNQt:cwwZjXtGC0KSIdk8K8eMClnlwgG5E
TLSH
T1D205BF45B6B941F9D033A138D956B607EA763C09072097DB23E44A6D2F637E07E3B722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

412104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

user32

SetClipboardData GetWindowThreadProcessId DefWindowProcW DispatchMessageA DestroyWindow SetWindowPos CreateWindowExW GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow IsWindow GetAsyncKeyState EnumWindows SetLayeredWindowAttributes TranslateMessage PeekMessageA PostQuitMessage UpdateWindow GetKeyState GetMessageExtraInfo LoadCursorA ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData

kernel32

SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetFileSizeEx CloseHandle GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue FlsGetValue GetProcessHeap HeapFree HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx WriteFile GetStdHandle GetModuleFileNameW MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetCurrentProcess GetTickCount64 GetCurrentThread ExitProcess GetModuleHandleExW SetStdHandle GetTimeZoneInformation HeapReAlloc CreateFileW HeapSize WriteConsoleW SetEndOfFile FlsAlloc UnhandledExceptionFilter ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent RtlUnwind SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile TerminateProcess

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetContext

d3dcompiler_47

D3DCompile

Name

.text

Size

605KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

145KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_92f2008f1c37fd0de179f24f74dfdde9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

d3d11

user32

kernel32

imm32

d3dcompiler_47

generic