2026-10-30_992b9e7ab6736a4214846c19bb53bc66_cobalt-strike_icedid_luca-stealer_njrat

General

Target
2026-10-30_992b9e7ab6736a4214846c19bb53bc66_cobalt-strike_icedid_luca-stealer_njrat
Size 302KB
Sample261030-1d8kcsfe98
SHA256 afcfae0821cb219491205a4758253ad5f078d98fb7e2dbc985629eefad18410b
MD5 992b9e7ab6736a4214846c19bb53bc66
SHA1 1123bcdac23800448348fd60784ac7ed9afe36a4
SHA512 4e19bc7504c8c27724ce82e4cf0cca88b2455d3f7fa4819b184a14ab6b4ef36318ec12e131d467e9f9ed729051be5e590eb1518fe0d52f7a88c4d694725a4e64
SSDEEP 3072:uq7Pvr00XzcKCJ+35zvvBK7J5DSpdvc9/WNA7T5OWjvTotoY43ec1+VymldvLzMw:t7PvrhjAERn4J5DSvq17T1qoh3e7
TLSH
T177644C157291C8E9D82690399C62FE4AE62178998F30C9BB37F0475F0E33790AD7A761
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-30_992b9e7ab6736a4214846c19bb53bc66_cobalt-strike_icedid_luca-stealer_njrat

File Explorer

2026-10-30_992b9e7ab6736a4214846c19bb53bc66_cobalt-strike_icedid_luca-stealer_njrat

.exe 302KB

2026-10-30_992b9e7ab6736a4214846c19bb53bc66_cobalt-strike_icedid_luca-stealer_njrat

IMPHASH d64dfe2ca61b8b4583d56c68f2ec4efb
SHA256 afcfae0821cb219491205a4758253ad5f078d98fb7e2dbc985629eefad18410b
MD5 992b9e7ab6736a4214846c19bb53bc66
SHA1 1123bcdac23800448348fd60784ac7ed9afe36a4
SHA512 4e19bc7504c8c27724ce82e4cf0cca88b2455d3f7fa4819b184a14ab6b4ef36318ec12e131d467e9f9ed729051be5e590eb1518fe0d52f7a88c4d694725a4e64
SSDEEP 3072:uq7Pvr00XzcKCJ+35zvvBK7J5DSpdvc9/WNA7T5OWjvTotoY43ec1+VymldvLzMw:t7PvrhjAERn4J5DSvq17T1qoh3e7
TLSH
T177644C157291C8E9D82690399C62FE4AE62178998F30C9BB37F0475F0E33790AD7A761
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

71232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle GetLastError QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive TryAcquireSRWLockShared WaitForSingleObject Sleep GetCurrentProcessId CreateThread GetCurrentThreadId OpenThread GetExitCodeThread SuspendThread ResumeThread GetThreadContext CreateToolhelp32Snapshot Thread32First Thread32Next RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx SetLastError EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapSize HeapReAlloc CreateFileW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-30_992b9e7ab6736a4214846c19bb53bc66_cobalt-strike_icedid_luca-stealer_njrat

kernel32

generic