General
- Target 2026-08-03_5e06176eeb40c90a05776b10dc430566_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 288KB
- Sample260803-c5aweaxale
- SHA256 aa6166de1397a167ec758a1ecece01435331c6a7dca894fc13841fec8f75099d
- MD5 5e06176eeb40c90a05776b10dc430566
- SHA1 5213abeccdc29382613d863c0f15a75e0795fbaf
- SHA512 b9c3971186634d8397549f74ede60325d95d2489c795fa805e6326514613e97b83443026e383ff712972efc99bbafd5ab345295fe7fb790274802241531ff8cf
- SSDEEP 3072:tL4FIj5G5rzNG1pkWH2ePgSQ+Yy8f+RtXtyISczk5E9u6LRpUY6+WSvm:tkwGdhWXgSvYOtyISczYE9u6Lw
- TLSH T1EA548E57F7A520F9D1B78239C9A21946EB72783643608BDF03A056762F332D19D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5e06176eeb40c90a05776b10dc430566_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5e06176eeb40c90a05776b10dc430566_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5e06176eeb40c90a05776b10dc430566_cobalt-strike_icedid_luca-stealer_njrat_satacom
- Size 288KB
- SHA256 aa6166de1397a167ec758a1ecece01435331c6a7dca894fc13841fec8f75099d
- MD5 5e06176eeb40c90a05776b10dc430566
- SHA1 5213abeccdc29382613d863c0f15a75e0795fbaf
- SHA512 b9c3971186634d8397549f74ede60325d95d2489c795fa805e6326514613e97b83443026e383ff712972efc99bbafd5ab345295fe7fb790274802241531ff8cf
- SSDEEP 3072:tL4FIj5G5rzNG1pkWH2ePgSQ+Yy8f+RtXtyISczk5E9u6LRpUY6+WSvm:tkwGdhWXgSvYOtyISczYE9u6Lw
- TLSH T1EA548E57F7A520F9D1B78239C9A21946EB72783643608BDF03A056762F332D19D3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext