General
- Target 2026-08-05_a8181ecead0942481f9fa8c8e70f3109_cobalt-strike_icedid_njrat_satacom_stealc
- Size 700KB
- Sample260805-dc2zvstzhv
- SHA256 19eb90633fd0d7582d00e2aad2a97dbc7fcabd0973e4a4affc708a2237525ad8
- MD5 a8181ecead0942481f9fa8c8e70f3109
- SHA1 6c225b38ed63217f10dcf100d4efbd6b4f708205
- SHA512 244e993f9caa67eb921b0ad6e0a93af8da128868a9f71766c4836ba17061f91f3525fb4438fc992bf80129720d447360277b85c6f1da7cf113967426fd235ff6
- SSDEEP 6144:BRUQoNI+Lx5sUgSzeQxLOmqNQe7AGcIyFCx6/VGBKMRyIDNQ0yFQpXU17I3Y:BRUQoN60AQe7vhQ9ix3DNQEpXU
- TLSH T193E48E29BA6407F9D16AC178CE430552EA727C854772DAEF039497A60F176E09F3FB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_a8181ecead0942481f9fa8c8e70f3109_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_a8181ecead0942481f9fa8c8e70f3109_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_a8181ecead0942481f9fa8c8e70f3109_cobalt-strike_icedid_njrat_satacom_stealc
- Size 700KB
- SHA256 19eb90633fd0d7582d00e2aad2a97dbc7fcabd0973e4a4affc708a2237525ad8
- MD5 a8181ecead0942481f9fa8c8e70f3109
- SHA1 6c225b38ed63217f10dcf100d4efbd6b4f708205
- SHA512 244e993f9caa67eb921b0ad6e0a93af8da128868a9f71766c4836ba17061f91f3525fb4438fc992bf80129720d447360277b85c6f1da7cf113967426fd235ff6
- SSDEEP 6144:BRUQoNI+Lx5sUgSzeQxLOmqNQe7AGcIyFCx6/VGBKMRyIDNQ0yFQpXU17I3Y:BRUQoN60AQe7vhQ9ix3DNQEpXU
- TLSH T193E48E29BA6407F9D16AC178CE430552EA727C854772DAEF039497A60F176E09F3FB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext