General
- Target 2026-05-23_dab1d27d47188f0be5166dff90fa6802_cobalt-strike_darkgate_satacom_stop_vidar
- Size 3.4MB
- Sample260523-ejy28ae17w
- SHA256 34e74506b0096abaa67329093e920548ea968252b00231f07897a387b3dbd85b
- MD5 dab1d27d47188f0be5166dff90fa6802
- SHA1 2b9500b3f08f2bcc6cc4e8ab6a560450d47833eb
- SHA512 bd94e21768d3e15fbdaeb270b94328b55e8455be37b747a563f11f2e1814a2b43fd24869b39ac547f275c6eae22f3715d01f0964db31df2ed2ed8a0923828825
- SSDEEP 49152:FLgVLKRWTQ6Zs5DhgPu/ev66hOlLgVLKRWTQ6Zs5DhgPu/ev66hOZDd79WC7:AKRuy5agADKRuy5agA2p7V
- TLSH T1E4F59E12A3D50075F6B33930867B9275A97E79311B3486CF5390897E5F32AC0AE38B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_dab1d27d47188f0be5166dff90fa6802_cobalt-strike_darkgate_satacom_stop_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_dab1d27d47188f0be5166dff90fa6802_cobalt-strike_darkgate_satacom_stop_vidar.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_dab1d27d47188f0be5166dff90fa6802_cobalt-strike_darkgate_satacom_stop_vidar
- Size 3.4MB
- SHA256 34e74506b0096abaa67329093e920548ea968252b00231f07897a387b3dbd85b
- MD5 dab1d27d47188f0be5166dff90fa6802
- SHA1 2b9500b3f08f2bcc6cc4e8ab6a560450d47833eb
- SHA512 bd94e21768d3e15fbdaeb270b94328b55e8455be37b747a563f11f2e1814a2b43fd24869b39ac547f275c6eae22f3715d01f0964db31df2ed2ed8a0923828825
- SSDEEP 49152:FLgVLKRWTQ6Zs5DhgPu/ev66hOlLgVLKRWTQ6Zs5DhgPu/ev66hOZDd79WC7:AKRuy5agADKRuy5agA2p7V
- TLSH T1E4F59E12A3D50075F6B33930867B9275A97E79311B3486CF5390897E5F32AC0AE38B5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.