2026-11-01_dec50507ade3764bd1d00e8b47ad5c79_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar

General

Target
2026-11-01_dec50507ade3764bd1d00e8b47ad5c79_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar
Size 352KB
Sample261102-gzjnkshx4p
SHA256 d3efa70b88914ec19dae7685c59b3a96b613126cafa4a0e5e866f553d87d21be
MD5 dec50507ade3764bd1d00e8b47ad5c79
SHA1 6a8170d9fd0a80c685d40941d8f14e0fbae1024b
SHA512 9b5710e2c0cb2171e87fe64ea6be68e89a7971620be17c74dbf42e0dfc0d947490df8b70a26f48e750e8bd89d01fd51e96586108af3814ab6791afb02fd89d8a
SSDEEP 6144:ARbJxH5LREs71nFuv8kyFJCEU/FGquohqg91DD:KxLKu1UaFJCEF9orH
TLSH
T134748D59F3A804F9E9739138C9959942E7727C4207709AEF13A08A562F237D19D3FB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_dec50507ade3764bd1d00e8b47ad5c79_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar

File Explorer

2026-11-01_dec50507ade3764bd1d00e8b47ad5c79_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar

.exe 352KB

2026-11-01_dec50507ade3764bd1d00e8b47ad5c79_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar

IMPHASH 57d441a23d145ab048511d8c9deb4552
SHA256 d3efa70b88914ec19dae7685c59b3a96b613126cafa4a0e5e866f553d87d21be
MD5 dec50507ade3764bd1d00e8b47ad5c79
SHA1 6a8170d9fd0a80c685d40941d8f14e0fbae1024b
SHA512 9b5710e2c0cb2171e87fe64ea6be68e89a7971620be17c74dbf42e0dfc0d947490df8b70a26f48e750e8bd89d01fd51e96586108af3814ab6791afb02fd89d8a
SSDEEP 6144:ARbJxH5LREs71nFuv8kyFJCEU/FGquohqg91DD:KxLKu1UaFJCEF9orH
TLSH
T134748D59F3A804F9E9739138C9959942E7727C4207709AEF13A08A562F237D19D3FB22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

78396

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

opencl

clGetKernelWorkGroupInfo clReleaseKernel clCreateKernel clGetProgramBuildInfo clGetProgramInfo clBuildProgram clReleaseProgram clCreateProgramWithSource clGetSupportedImageFormats clGetPlatformIDs clReleaseContext clCreateContext clReleaseDevice clRetainDevice clGetDeviceInfo clGetDeviceIDs clGetPlatformInfo

kernel32

TlsAlloc WriteConsoleW CreateFileW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount RtlUnwind TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW

Name

.text

Size

217KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

85KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_dec50507ade3764bd1d00e8b47ad5c79_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_stealc_vidar

opencl

kernel32

generic