2026-11-03_6df3da676ab1ee84a214328037fc668f_akira_cobalt-strike_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-03_6df3da676ab1ee84a214328037fc668f_akira_cobalt-strike_icedid_luca-stealer_njrat_stealc
Size 786KB
Sample261104-v7n5xstsft
SHA256 6e8811a24f3a1a0e50415618980bd965494ba43b9e361d698c4a9b3fae52c653
MD5 6df3da676ab1ee84a214328037fc668f
SHA1 cff3369029933f5d2545e2f360d7efc559be535e
SHA512 aec79e57d5f972096728b0fcfb8cc863f65a38feff2b13617d57706e039c2a9d1c81b618dfb3a6bff876302687878cd4375742a494f2988e27712d35ae12c78c
SSDEEP 12288:pBfOFX7rttIUI66pLYc4Dd51vLpFhaR9SkxEek3P+:zc3tA66pLmD7BLpFURR
TLSH
T1D8057D26BB9402FCD077C17ACD568912FB71780647616BDF07908AA75F2BAE05E3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-03_6df3da676ab1ee84a214328037fc668f_akira_cobalt-strike_icedid_luca-stealer_njrat_stealc

File Explorer

2026-11-03_6df3da676ab1ee84a214328037fc668f_akira_cobalt-strike_icedid_luca-stealer_njrat_stealc

.exe 786KB

2026-11-03_6df3da676ab1ee84a214328037fc668f_akira_cobalt-strike_icedid_luca-stealer_njrat_stealc

IMPHASH 3bc079b712453012665b9779bbf4c807
SHA256 6e8811a24f3a1a0e50415618980bd965494ba43b9e361d698c4a9b3fae52c653
MD5 6df3da676ab1ee84a214328037fc668f
SHA1 cff3369029933f5d2545e2f360d7efc559be535e
SHA512 aec79e57d5f972096728b0fcfb8cc863f65a38feff2b13617d57706e039c2a9d1c81b618dfb3a6bff876302687878cd4375742a494f2988e27712d35ae12c78c
SSDEEP 12288:pBfOFX7rttIUI66pLYc4Dd51vLpFhaR9SkxEek3P+:zc3tA66pLmD7BLpFURR
TLSH
T1D8057D26BB9402FCD077C17ACD568912FB71780647616BDF07908AA75F2BAE05E3E702
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

338292

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW ConvertStringSecurityDescriptorToSecurityDescriptorW

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

gdi32

GdiFlush GetObjectW CreateDIBSection BitBlt CreateCompatibleDC DeleteDC DeleteObject SelectObject

setupapi

SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList

user32

OpenDesktopW EnumDisplayDevicesW EnumDisplaySettingsExW ChangeDisplaySettingsExW GetRawInputDeviceList GetCursorInfo SetProcessDpiAwarenessContext UnhookWinEvent SetWinEventHook MonitorFromPoint GetIconInfo DrawIconEx LoadCursorW ReleaseDC GetDC GetSystemMetrics MsgWaitForMultipleObjects MapVirtualKeyW SendInput PeekMessageW DispatchMessageW TranslateMessage GetUserObjectInformationW GetThreadDesktop CloseDesktop SetThreadDesktop OpenInputDesktop

kernel32

SetEndOfFile WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW SetStdHandle DeleteFileW SetFilePointerEx GetFileSizeEx GetConsoleOutputCP GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc FlushFileBuffers ReadFile WriteFile CloseHandle GetLastError SetLastError ConnectNamedPipe DisconnectNamedPipe CreateNamedPipeW GetOverlappedResult CancelIoEx SetEvent ResetEvent WaitForSingleObject OpenMutexW CreateEventW OpenEventW SetWaitableTimer CreateWaitableTimerExW WaitForMultipleObjects CreateWaitableTimerW GetCurrentProcess GetCurrentProcessId TerminateProcess GetCurrentThreadId ProcessIdToSessionId OpenProcess GetTickCount64 CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameW GetModuleHandleW GetProcAddress LocalFree QueryFullProcessImageNameW GetNamedPipeClientProcessId MultiByteToWideChar WideCharToMultiByte CreateToolhelp32Snapshot Process32FirstW Process32NextW Sleep GetExitCodeProcess CreateProcessW GetStdHandle GetDynamicTimeZoneInformation GetConsoleMode WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute GetCommandLineW GetCommandLineA ExitProcess FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetDriveTypeW QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObjectEx GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW WakeConditionVariable WakeAllConditionVariable FormatMessageA GetLocaleInfoEx InitOnceBeginInitialize InitOnceComplete GetCurrentDirectoryW CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW AreFileApisANSI MoveFileExW GetFileInformationByHandleEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection GetSystemTimeAsFileTime EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW RtlUnwind

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

Name

.text

Size

502KB

Virtual Size

502KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

150KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-03_6df3da676ab1ee84a214328037fc668f_akira_cobalt-strike_icedid_luca-stealer_njrat_stealc

advapi32

wtsapi32

gdi32

setupapi

user32

kernel32

d3d11

dxgi

shell32

ole32

generic