General
- Target 2026-08-09_89322dcb05068bbda3b0ad5e7cea4c78_cobalt-strike_icedid_njrat_satacom_vidar
- Size 444KB
- Sample260809-fxrezavsev
- SHA256 8c5db28e6441bd5c7698337b425d019fc9397335e9983bd178321b6c8cd900c2
- MD5 89322dcb05068bbda3b0ad5e7cea4c78
- SHA1 208e780d491bdf59f42fda3698f6c430c7829c47
- SHA512 8e36692a95bf3ab6f4a137827a01fea1cabe5e6411bce37adeb2570dd6d1f1a3ffcd2bc271387a97909ae6acf5d04dd36d6697cd47fecb187e08b5ec76c56f35
- SSDEEP 3072:foGwD9ytCiumQ7/Tv1uUYML5/Hv3xzPlmBGhDNuUY6+WSvm:gtwbK7/5uUYM1574B6p/
- TLSH T1B7A46B43EB5530E9E1BA42748472CA3A67B6BC311671872F06E87DA77F333815D2AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_89322dcb05068bbda3b0ad5e7cea4c78_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_89322dcb05068bbda3b0ad5e7cea4c78_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_89322dcb05068bbda3b0ad5e7cea4c78_cobalt-strike_icedid_njrat_satacom_vidar
- Size 444KB
- SHA256 8c5db28e6441bd5c7698337b425d019fc9397335e9983bd178321b6c8cd900c2
- MD5 89322dcb05068bbda3b0ad5e7cea4c78
- SHA1 208e780d491bdf59f42fda3698f6c430c7829c47
- SHA512 8e36692a95bf3ab6f4a137827a01fea1cabe5e6411bce37adeb2570dd6d1f1a3ffcd2bc271387a97909ae6acf5d04dd36d6697cd47fecb187e08b5ec76c56f35
- SSDEEP 3072:foGwD9ytCiumQ7/Tv1uUYML5/Hv3xzPlmBGhDNuUY6+WSvm:gtwbK7/5uUYM1574B6p/
- TLSH T1B7A46B43EB5530E9E1BA42748472CA3A67B6BC311671872F06E87DA77F333815D2AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext