General

  • Target
    2026-08-08_20e2b3f12ce62bd8e59edc5d385d8b6b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
  • Size 12.6MB
  • Sample260809-anfdfsxbpb
  • SHA256 85a0205241edf211d53ea762d72c4a01a859865bc640eb35b29e13285dbdca3b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-08_20e2b3f12ce62bd8e59edc5d385d8b6b_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
    • Size 12.6MB
    • SHA256 85a0205241edf211d53ea762d72c4a01a859865bc640eb35b29e13285dbdca3b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks