General
- Target 2026-08-08_cfb4537acf81ddb581b4e254f77f92cd_cobalt-strike_icedid_njrat_stealc
- Size 283KB
- Sample260808-rhgg1asths
- SHA256 4ac87d5b8865a9ecaae440a72e122b83c4c2424666abad52d9efdb072d73de35
- MD5 cfb4537acf81ddb581b4e254f77f92cd
- SHA1 e5bdd13951eb4b2cc13400162dd1f689ddd555d4
- SHA512 2c83e0afb202e8388d9469d6fe81170f4d55f6ead5dad7fd7caac0454c0814312db3b6d1a5ebb96fad8550f35204841edc2d3bf5437799bb3a4fe433517ad9b6
- SSDEEP 3072:G+uTliVDiavRHlQCoT5Ow3xOGjSuurtbYAv9+JFymwCOHdk3Qq25zdsPp6/3mG+8:GcRsT5Ow3AGIlY3sdSNE
- TLSH T154545D16B7A414F9F967C53DCC834506EB72BC464791EACF03A04AA62F276E06E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_cfb4537acf81ddb581b4e254f77f92cd_cobalt-strike_icedid_njrat_stealc.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_cfb4537acf81ddb581b4e254f77f92cd_cobalt-strike_icedid_njrat_stealc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_cfb4537acf81ddb581b4e254f77f92cd_cobalt-strike_icedid_njrat_stealc
- Size 283KB
- SHA256 4ac87d5b8865a9ecaae440a72e122b83c4c2424666abad52d9efdb072d73de35
- MD5 cfb4537acf81ddb581b4e254f77f92cd
- SHA1 e5bdd13951eb4b2cc13400162dd1f689ddd555d4
- SHA512 2c83e0afb202e8388d9469d6fe81170f4d55f6ead5dad7fd7caac0454c0814312db3b6d1a5ebb96fad8550f35204841edc2d3bf5437799bb3a4fe433517ad9b6
- SSDEEP 3072:G+uTliVDiavRHlQCoT5Ow3xOGjSuurtbYAv9+JFymwCOHdk3Qq25zdsPp6/3mG+8:GcRsT5Ow3AGIlY3sdSNE
- TLSH T154545D16B7A414F9F967C53DCC834506EB72BC464791EACF03A04AA62F276E06E3D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE