2026-11-01_961d408942f8cbb6e60e8b8230a93538_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

General

Target
2026-11-01_961d408942f8cbb6e60e8b8230a93538_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
Size 54.5MB
Sample261102-rnxfeafd25
SHA256 e800292eb445a430a5b9b7c82a6d47993a007a89e0b30d26a841e1239ca1474a
MD5 961d408942f8cbb6e60e8b8230a93538
SHA1 d8f951e44db65feb7d263c112f5e73040b477528
SHA512 f87bb3f16f1d23ecf229d08efe3aaf6228629062b686b9beef70a974019e25f8b9b963b3491f717f1ccd011e4677db03674356bb9983b88f0f529364f57998ae
SSDEEP 1572864:ygN7ZmSD0FsQqd04irWtL8YO/VxL8arc2DwQ:ygNdmSlQqd04irW58YO/VxvwWD
TLSH
T10BC7332D5D45D4E2EE32D538FA9A378476AB587037137BC90EF6D4622A335C0207ADAC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-01_961d408942f8cbb6e60e8b8230a93538_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

File Explorer

2026-11-01_961d408942f8cbb6e60e8b8230a93538_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

.exe 54.5MB

2026-11-01_961d408942f8cbb6e60e8b8230a93538_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

IMPHASH dbddda14b2c5952f66b165aa2aa59eaa
SHA256 e800292eb445a430a5b9b7c82a6d47993a007a89e0b30d26a841e1239ca1474a
MD5 961d408942f8cbb6e60e8b8230a93538
SHA1 d8f951e44db65feb7d263c112f5e73040b477528
SHA512 f87bb3f16f1d23ecf229d08efe3aaf6228629062b686b9beef70a974019e25f8b9b963b3491f717f1ccd011e4677db03674356bb9983b88f0f529364f57998ae
SSDEEP 1572864:ygN7ZmSD0FsQqd04irWtL8YO/VxL8arc2DwQ:ygNdmSlQqd04irW58YO/VxvwWD
TLSH
T10BC7332D5D45D4E2EE32D538FA9A378476AB587037137BC90EF6D4622A335C0207ADAC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

54772

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

shell32

SHFileOperationW SHGetFolderPathW CommandLineToArgvW

kernel32

WriteConsoleW HeapReAlloc CreateDirectoryW SizeofResource SetConsoleCtrlHandler AddDllDirectory GetCommandLineW GetStdHandle WriteFile GetShortPathNameW TerminateProcess GetModuleFileNameW SetEnvironmentVariableW K32GetModuleFileNameExW GetEnvironmentVariableW GetTempPathW FindResourceA WaitForSingleObject CreateFileW GetFileAttributesW GetModuleHandleA OpenProcess Sleep GetLastError LockResource CloseHandle LoadResource GetProcAddress GetCurrentProcessId CreateProcessW WideCharToMultiByte GetSystemTimeAsFileTime FormatMessageA LoadLibraryExW GetExitCodeProcess RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW SetFilePointerEx RtlUnwindEx SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary EncodePointer RaiseException RtlPcToFileHeader ExitProcess GetModuleHandleExW GetCommandLineA HeapAlloc MultiByteToWideChar HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetFileType GetStringTypeW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx HeapSize

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-01_961d408942f8cbb6e60e8b8230a93538_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar

shell32

kernel32

generic