General
- Target 2026-07-31_8f64c92921dc89aeab63447b8142c2eb_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 724KB
- Sample260801-br9bdabe25
- SHA256 baf879126f78c4b6227bc72c874d0a47bd4a5209f832fa3f215730ee842617d1
- MD5 8f64c92921dc89aeab63447b8142c2eb
- SHA1 7da9cd10f142969bb2c04c22da124cf36343c8a2
- SHA512 ea741ac915cb7a35a949dfa8d5bb50b123a4477a5b1dddee70d5d09d70e76b52ffe1ecbb2f3490f03568601d370bf4326f6da6e6bceaa717cb7098c8093af1dd
- SSDEEP 12288:EtZSmlf/z6Xnhka4ApO3yW12I1aFRGdmzCcKFX/2bTaokP7:EtZSmlHuXnhZ4bCW12IsFRGdmecyXeq
- TLSH T1B3F40783EBB221E8E4F7D13681622327BC723C1983348797A78957265B727E0D97E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_8f64c92921dc89aeab63447b8142c2eb_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_8f64c92921dc89aeab63447b8142c2eb_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_8f64c92921dc89aeab63447b8142c2eb_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 724KB
- SHA256 baf879126f78c4b6227bc72c874d0a47bd4a5209f832fa3f215730ee842617d1
- MD5 8f64c92921dc89aeab63447b8142c2eb
- SHA1 7da9cd10f142969bb2c04c22da124cf36343c8a2
- SHA512 ea741ac915cb7a35a949dfa8d5bb50b123a4477a5b1dddee70d5d09d70e76b52ffe1ecbb2f3490f03568601d370bf4326f6da6e6bceaa717cb7098c8093af1dd
- SSDEEP 12288:EtZSmlf/z6Xnhka4ApO3yW12I1aFRGdmzCcKFX/2bTaokP7:EtZSmlHuXnhZ4bCW12IsFRGdmecyXeq
- TLSH T1B3F40783EBB221E8E4F7D13681622327BC723C1983348797A78957265B727E0D97E351
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext