General
- Target 2026-08-08_871bf8fc8037e77cc68b334a114399d1_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_stealc
- Size 65.0MB
- Sample260808-lxap4sdk6x
- SHA256 46847732d3bee759c899fb3063267980992730966202c89b8368e31510b48594
- MD5 871bf8fc8037e77cc68b334a114399d1
- SHA1 682ff142e1fdfd884c84793e4e8a69d6e9c09a61
- SHA512 4ffd52cb8db8260e033880820de7e363ae7dc785df8f2d61f892acaf5d406b41ed3416278dcb1c0b6261cddb332b86b9297a2812e3e00ae596d0b680e34fe0f5
- SSDEEP 786432:3Q8rxl0vX27zo1RdApDqz/gfC2Q/FgtXeLweHEa0lSMNm:33xQT1TApDqzX2QNgeweka0l/m
- TLSH T192E7332BA26A01FCD0AFC13A99768502EA73B8101B319DCB57D0C9A95F376F11E3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_871bf8fc8037e77cc68b334a114399d1_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_871bf8fc8037e77cc68b334a114399d1_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom_stealc
- Size 65.0MB
- SHA256 46847732d3bee759c899fb3063267980992730966202c89b8368e31510b48594
- MD5 871bf8fc8037e77cc68b334a114399d1
- SHA1 682ff142e1fdfd884c84793e4e8a69d6e9c09a61
- SHA512 4ffd52cb8db8260e033880820de7e363ae7dc785df8f2d61f892acaf5d406b41ed3416278dcb1c0b6261cddb332b86b9297a2812e3e00ae596d0b680e34fe0f5
- SSDEEP 786432:3Q8rxl0vX27zo1RdApDqz/gfC2Q/FgtXeLweHEa0lSMNm:33xQT1TApDqzX2QNgeweka0l/m
- TLSH T192E7332BA26A01FCD0AFC13A99768502EA73B8101B319DCB57D0C9A95F376F11E3E751
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE