2026-10-28_6827651906b6d42b968ae37f3ea77464_cobalt-strike_icedid_luca-stealer_njrat_stealc

General

Target
2026-10-28_6827651906b6d42b968ae37f3ea77464_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 313KB
Sample261030-dd8tssdb38
SHA256 1473f1cf360538a982bece76e76e9272f94986e7acf6eebd96aedbf428c18077
MD5 6827651906b6d42b968ae37f3ea77464
SHA1 895888833f951a6c29c93fe12907703d2c037301
SHA512 b4722512f8c34a9a7893bea763e75432714fd6acd908f85adcde3aab1afe240c885422fe98fab0d0435c62628dc5ea93c6db3f0af1cde0854338342f4213b49e
SSDEEP 6144:BXfPMgFZPqpTSfr5j/LAdgknyUi0IJ7b7VPFUmomYp1:lfPMmZPd2jli0ub5d5U
TLSH
T1D7647C25F7A414F9E5A7C17CCD824906EB72BC5647A0D6CF13A04A962F237E09E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-28_6827651906b6d42b968ae37f3ea77464_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-10-28_6827651906b6d42b968ae37f3ea77464_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 313KB

2026-10-28_6827651906b6d42b968ae37f3ea77464_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 84bb4ececd655b0a697c2653b455e6eb
SHA256 1473f1cf360538a982bece76e76e9272f94986e7acf6eebd96aedbf428c18077
MD5 6827651906b6d42b968ae37f3ea77464
SHA1 895888833f951a6c29c93fe12907703d2c037301
SHA512 b4722512f8c34a9a7893bea763e75432714fd6acd908f85adcde3aab1afe240c885422fe98fab0d0435c62628dc5ea93c6db3f0af1cde0854338342f4213b49e
SSDEEP 6144:BXfPMgFZPqpTSfr5j/LAdgknyUi0IJ7b7VPFUmomYp1:lfPMmZPd2jli0ub5d5U
TLSH
T1D7647C25F7A414F9E5A7C17CCD824906EB72BC5647A0D6CF13A04A962F237E09E3E712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

64124

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WriteConsoleW HeapSize WideCharToMultiByte SetStdHandle SetEnvironmentVariableW GetLastError CloseHandle GetFileSizeEx GetProcessHeap CreateFileW QueryPerformanceCounter QueryPerformanceFrequency Sleep GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwind

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

advapi32

RegCreateKeyExW RegCloseKey GetUserNameW RegSetValueExW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-28_6827651906b6d42b968ae37f3ea77464_cobalt-strike_icedid_luca-stealer_njrat_stealc

kernel32

shell32

ole32

advapi32

generic