General
- Target 2026-08-08_66f1b5fc821bdb8fc9a44f16c2fc1208_cobalt-strike_darkgate_gcleaner_hijackloader_icedid_satacom_stealc_vidar
- Size 16.0MB
- Sample260808-tfprpshq4w
- SHA256 132824a4694334f013db9b806f71ebf4522f0d834beda52558ac9e22ad617607
- MD5 66f1b5fc821bdb8fc9a44f16c2fc1208
- SHA1 ec357c980d158e2568558b1514daefe8f4cad27b
- SHA512 35983d0731cbfdf5159ddec60052ae7f6c34be5a95f3565027bd00ac517731ff9da45944f96fd788075a2870237d4b6ae37a2feb2c1882665c936c84ce008508
- SSDEEP 393216:rosWm3LfGUzlErVtxFbdcExqWBMj9NgB0azzVr:ri0LfGMoVB/oWXfzx
- TLSH T18CF6333BF264A03ED5AB1B32497396509A3BBA55A41A8C2F07FC744DDF321710E3B616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_66f1b5fc821bdb8fc9a44f16c2fc1208_cobalt-strike_darkgate_gcleaner_hijackloader_icedid_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_66f1b5fc821bdb8fc9a44f16c2fc1208_cobalt-strike_darkgate_gcleaner_hijackloader_icedid_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_66f1b5fc821bdb8fc9a44f16c2fc1208_cobalt-strike_darkgate_gcleaner_hijackloader_icedid_satacom_stealc_vidar
- Size 16.0MB
- SHA256 132824a4694334f013db9b806f71ebf4522f0d834beda52558ac9e22ad617607
- MD5 66f1b5fc821bdb8fc9a44f16c2fc1208
- SHA1 ec357c980d158e2568558b1514daefe8f4cad27b
- SHA512 35983d0731cbfdf5159ddec60052ae7f6c34be5a95f3565027bd00ac517731ff9da45944f96fd788075a2870237d4b6ae37a2feb2c1882665c936c84ce008508
- SSDEEP 393216:rosWm3LfGUzlErVtxFbdcExqWBMj9NgB0azzVr:ri0LfGMoVB/oWXfzx
- TLSH T18CF6333BF264A03ED5AB1B32497396509A3BBA55A41A8C2F07FC744DDF321710E3B616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DeerStealer
-
Family: DeerStealer
DeerStealer is a sophisticated information stealer written in C++.
-
Detects executables packed with Enigma
-
Detects executables packed with Themida
-
Detects executables packed with VMProtect.