2026-10-28_9bda2a6e984866376d3435f51342753d_cobalt-strike_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-28_9bda2a6e984866376d3435f51342753d_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 486KB
Sample261029-2nmajscf45
SHA256 ff801424b2d22913851743e19fd49b64bf575b93bef66df924994046aa2bdb2a
MD5 9bda2a6e984866376d3435f51342753d
SHA1 b66f3917d3b21b661f96c73bdd2404f49de240d3
SHA512 247cd796d2dc2729425e8ac03448a79302b354748cecb027608e7a45b4ccf4ff301b943c59cf5308c39bd21fad514c7fe81219ec156b27d2c27a95a3b5a1d690
SSDEEP 6144:jiX/l49RLWKJGSE0YLBpqNfUgF0S6OvEG0Ug5zd1Jd1EJKdAh5LimXpv4MH:jQtAJGSXYVpqNBF0j5zdR6JKMiU
TLSH
T1E8B4AF95B2E902FDE1BF90399A56A807F6323405076099DB03E04AF54F27AE15F7F722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_9bda2a6e984866376d3435f51342753d_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-28_9bda2a6e984866376d3435f51342753d_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 486KB

2026-10-28_9bda2a6e984866376d3435f51342753d_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 10f50f89f13bd7479a0e9f441bc7b199
SHA256 ff801424b2d22913851743e19fd49b64bf575b93bef66df924994046aa2bdb2a
MD5 9bda2a6e984866376d3435f51342753d
SHA1 b66f3917d3b21b661f96c73bdd2404f49de240d3
SHA512 247cd796d2dc2729425e8ac03448a79302b354748cecb027608e7a45b4ccf4ff301b943c59cf5308c39bd21fad514c7fe81219ec156b27d2c27a95a3b5a1d690
SSDEEP 6144:jiX/l49RLWKJGSE0YLBpqNfUgF0S6OvEG0Ug5zd1Jd1EJKdAh5LimXpv4MH:jQtAJGSXYVpqNBF0j5zdR6JKMiU
TLSH
T1E8B4AF95B2E902FDE1BF90399A56A807F6323405076099DB03E04AF54F27AE15F7F722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

241516

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetCurrentDirectoryA CreateDirectoryA GetTempPathA CloseHandle QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared Sleep OpenProcess GetTickCount VirtualProtectEx ReadProcessMemory WriteProcessMemory CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW TryAcquireSRWLockExclusive GetCurrentThreadId GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WriteConsoleW WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ReadFile ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType SetFilePointerEx GetConsoleMode ReadConsoleW GetFileSizeEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP CreateFileW HeapSize HeapReAlloc SetEndOfFile

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_9bda2a6e984866376d3435f51342753d_cobalt-strike_icedid_luca-stealer_njrat_stealc

kernel32

generic