General
- Target 2026-08-04_312d50625601b9063d4731e00234ca4c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 655KB
- Sample260804-jn3y7avapc
- SHA256 23b3b039cbfb06f5d2f6ba91af103559161dc5db495eaaadcddf1fb88415d64b
- MD5 312d50625601b9063d4731e00234ca4c
- SHA1 31e1410a55362a0917ed5b66e2f1e8bbf45970b6
- SHA512 8f6a861522dc5a2e13d86834d44d927a586685887051863da343646bb6320b0fc4a21853e8b3d4e7d6de4270dfed49263fa7a4af8862f16f148648a2cff5940d
- SSDEEP 6144:eYBmBMaO3dfL3bjA/eXMJEPf1op3ATF625amoJN3hTTZxj67NVzH+AIuRvIR:9BmWfL3uEFoYQN35b+rSXuRvI
- TLSH T163E43A0BEBB602F5D4BAC039C652612AFD7178A68370A7C757915B571B32BE4AB3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_312d50625601b9063d4731e00234ca4c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_312d50625601b9063d4731e00234ca4c_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_312d50625601b9063d4731e00234ca4c_cobalt-strike_icedid_njrat_satacom_stealc
- Size 655KB
- SHA256 23b3b039cbfb06f5d2f6ba91af103559161dc5db495eaaadcddf1fb88415d64b
- MD5 312d50625601b9063d4731e00234ca4c
- SHA1 31e1410a55362a0917ed5b66e2f1e8bbf45970b6
- SHA512 8f6a861522dc5a2e13d86834d44d927a586685887051863da343646bb6320b0fc4a21853e8b3d4e7d6de4270dfed49263fa7a4af8862f16f148648a2cff5940d
- SSDEEP 6144:eYBmBMaO3dfL3bjA/eXMJEPf1op3ATF625amoJN3hTTZxj67NVzH+AIuRvIR:9BmWfL3uEFoYQN35b+rSXuRvI
- TLSH T163E43A0BEBB602F5D4BAC039C652612AFD7178A68370A7C757915B571B32BE4AB3D300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext