2026-10-28_5ff8a3d5216bd5b18948c7598ed808d8_cobalt-strike_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-28_5ff8a3d5216bd5b18948c7598ed808d8_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 311KB
Sample261030-d2yzhavycv
SHA256 b798816227eb5a2588038cfa9ba0459148bbc8b55a2f57c989a1ff4b1d3918ed
MD5 5ff8a3d5216bd5b18948c7598ed808d8
SHA1 1df6338e1fee9afaf5c81a9de8eb99d55fff6fab
SHA512 338c9b7ef14878bc9d87543a51b9037848a813f76e0fc905ec74153a9c139e91cd351607383354b672b687b9bd7e1dec38c1b5f4922a2164e63724afd70a2de9
SSDEEP 6144:5iMeXY8ibExTzBA1PZ62ZaUWDL/4ktjFhjEjoEjnj6dNmprT:+8YAn6c6LgaFyjoEj
TLSH
T116648D1AE79514FDE5ABC17CCD824942EB727C5647A1D7CF13A04A522F236E08E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_5ff8a3d5216bd5b18948c7598ed808d8_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-28_5ff8a3d5216bd5b18948c7598ed808d8_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 311KB

2026-10-28_5ff8a3d5216bd5b18948c7598ed808d8_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 09b7f1705a895117521ee8bd1570aebf
SHA256 b798816227eb5a2588038cfa9ba0459148bbc8b55a2f57c989a1ff4b1d3918ed
MD5 5ff8a3d5216bd5b18948c7598ed808d8
SHA1 1df6338e1fee9afaf5c81a9de8eb99d55fff6fab
SHA512 338c9b7ef14878bc9d87543a51b9037848a813f76e0fc905ec74153a9c139e91cd351607383354b672b687b9bd7e1dec38c1b5f4922a2164e63724afd70a2de9
SSDEEP 6144:5iMeXY8ibExTzBA1PZ62ZaUWDL/4ktjFhjEjoEjnj6dNmprT:+8YAn6c6LgaFyjoEj
TLSH
T116648D1AE79514FDE5ABC17CCD824942EB727C5647A1D7CF13A04A522F236E08E3E722
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

63916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WideCharToMultiByte WriteConsoleW HeapSize FileTimeToSystemTime SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetSystemTimeAsFileTime GetLastError GetFileAttributesExW GetProcessHeap FileTimeToLocalFileTime QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLocaleInfoEx Sleep GetCurrentThreadId CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW CloseHandle GetModuleHandleW GetProcAddress GetFileInformationByHandleEx MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW RtlUnwind

ole32

CoInitializeEx CoUninitialize CoCreateInstance CoTaskMemFree

advapi32

RegCreateKeyExW RegCloseKey GetUserNameW RegSetValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_5ff8a3d5216bd5b18948c7598ed808d8_cobalt-strike_icedid_luca-stealer_njrat_stealc

kernel32

ole32

advapi32

generic