2026-10-31_71ca8b6fd4f988370a50bf932702c8d5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-31_71ca8b6fd4f988370a50bf932702c8d5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 1.6MB
Sample261102-aha7jsd14v
SHA256 5f7e07ac3abef81bd612ed442e1801894a5f6072c8dfc857d729f23860de0778
MD5 71ca8b6fd4f988370a50bf932702c8d5
SHA1 f48e6140dd7c5d65bcc6f21a868c432b7f460e46
SHA512 e88ee511b90b8e6b860dcc59a905243527d1ea10adfcda212973b2a2627cc05d2e5cf7012574866d36a4339a2147ba71e9901abc01de7f8abca29a9a9cf846f5
SSDEEP 24576:6EIU58bIMKEz5CYtk/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:6xQ9XECnLNiXicJFFRGNzj3
TLSH
T1B075F156F7A404F8E1BB9138C9664906E7717C1A07705BCF23A4561A2F33BE15E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-31_71ca8b6fd4f988370a50bf932702c8d5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-10-31_71ca8b6fd4f988370a50bf932702c8d5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 1.6MB

2026-10-31_71ca8b6fd4f988370a50bf932702c8d5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 534a1143bd7c6d9f0c98f18367c5e20f
SHA256 5f7e07ac3abef81bd612ed442e1801894a5f6072c8dfc857d729f23860de0778
MD5 71ca8b6fd4f988370a50bf932702c8d5
SHA1 f48e6140dd7c5d65bcc6f21a868c432b7f460e46
SHA512 e88ee511b90b8e6b860dcc59a905243527d1ea10adfcda212973b2a2627cc05d2e5cf7012574866d36a4339a2147ba71e9901abc01de7f8abca29a9a9cf846f5
SSDEEP 24576:6EIU58bIMKEz5CYtk/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:6xQ9XECnLNiXicJFFRGNzj3
TLSH
T1B075F156F7A404F8E1BB9138C9664906E7717C1A07705BCF23A4561A2F33BE15E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

98872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\pc\other_tools\driverinstaller\InfInstaller\x64\Release\InfInstallerx64.pdb

kernel32

LocalAlloc GetModuleHandleA Sleep CopyFileA GetLastError GetFileAttributesA DeleteFileA WaitForSingleObject GetSystemInfo GetProcAddress LocalFree RemoveDirectoryA CreateProcessA CreateDirectoryA GetPrivateProfileStringA SetEndOfFile PeekNamedPipe CreatePipe CloseHandle ReadFile WriteConsoleW HeapSize CreateFileW GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation ReadConsoleW GetFileAttributesExW WideCharToMultiByte MultiByteToWideChar LCMapStringEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer CompareStringEx GetCPInfo GetStringTypeW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW FindClose FindFirstFileExW FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode HeapReAlloc RtlUnwind

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

shlwapi

PathFileExistsA

setupapi

SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo CM_Locate_DevNodeA SetupDiBuildDriverInfoList SetupDiGetDriverInfoDetailA SetupUninstallOEMInfA SetupDiEnumDriverInfoA CM_Reenumerate_DevNode SetupDiGetClassDevsA SetupDiGetClassDevsExA

newdev

DiUninstallDevice

Name

.text

Size

247KB

Virtual Size

246KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

936B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.3MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-31_71ca8b6fd4f988370a50bf932702c8d5_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar

kernel32

advapi32

shlwapi

setupapi

newdev

generic