General
- Target 2026-08-03_b5929e8b2ff562e6d8c96854b030e295_cobalt-strike_icedid_njrat_satacom
- Size 316KB
- Sample260804-l5aebahc85
- SHA256 7544945b42fd132e95d0596cbb3edd2abe438f7bb20f7f4dfb631d963626efe2
- MD5 b5929e8b2ff562e6d8c96854b030e295
- SHA1 60522d6605eced44e7676350eaf82e78e4b3af5f
- SHA512 a807cea8fdc809029033af0f6c22d44d0de7d2a100cb3d3bbd6899fad4b737371a55a57accc08a9eaaf2bf51ceaebefbc78b301a31230d622d9cffe9250f225f
- SSDEEP 3072:LlVo5S75t7ppXF87PoDR4iVYFejwG4vvmzQ80Ulb7I3vUY6+WSvm:Ll+e9pp1+hcYFefcXU17I34
- TLSH T1FE647D17EB9630FEE27A9638C9520D41EB72B8654761ABDF03804AA61F237C09F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_b5929e8b2ff562e6d8c96854b030e295_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_b5929e8b2ff562e6d8c96854b030e295_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_b5929e8b2ff562e6d8c96854b030e295_cobalt-strike_icedid_njrat_satacom
- Size 316KB
- SHA256 7544945b42fd132e95d0596cbb3edd2abe438f7bb20f7f4dfb631d963626efe2
- MD5 b5929e8b2ff562e6d8c96854b030e295
- SHA1 60522d6605eced44e7676350eaf82e78e4b3af5f
- SHA512 a807cea8fdc809029033af0f6c22d44d0de7d2a100cb3d3bbd6899fad4b737371a55a57accc08a9eaaf2bf51ceaebefbc78b301a31230d622d9cffe9250f225f
- SSDEEP 3072:LlVo5S75t7ppXF87PoDR4iVYFejwG4vvmzQ80Ulb7I3vUY6+WSvm:Ll+e9pp1+hcYFefcXU17I34
- TLSH T1FE647D17EB9630FEE27A9638C9520D41EB72B8654761ABDF03804AA61F237C09F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext