General
- Target 2026-08-09_4a8a93efa65ccb0e2e50226f2d9c64c1_cobalt-strike_icedid_njrat_vidar
- Size 2.4MB
- Sample260809-vd9jrssbqd
- SHA256 72e53986009eaa910120e07700bc687ba6f0207fca84124b4f37744ea627ddf8
- MD5 4a8a93efa65ccb0e2e50226f2d9c64c1
- SHA1 3a62d6a9f24e61322fd9b4114013c1f4b135c7f0
- SHA512 4896f0b945dce4f68ff8814fadf266e311e45da6fa87127ad35d7792e95841809cdb291bb732b10d3dc1a232aced66ca172633f9e2b8eb0199e049e429b969b1
- SSDEEP 49152:5umKCy6ZsUmbl5mLBSDf5FA330fsUdp9W4LUmO0GG+WC:rJOB264
- TLSH T1EAB58E17F29A10D8D05ED178CB5A8232EAB17C490B25B5DF0794BA252F37EE45B3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4a8a93efa65ccb0e2e50226f2d9c64c1_cobalt-strike_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4a8a93efa65ccb0e2e50226f2d9c64c1_cobalt-strike_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4a8a93efa65ccb0e2e50226f2d9c64c1_cobalt-strike_icedid_njrat_vidar
- Size 2.4MB
- SHA256 72e53986009eaa910120e07700bc687ba6f0207fca84124b4f37744ea627ddf8
- MD5 4a8a93efa65ccb0e2e50226f2d9c64c1
- SHA1 3a62d6a9f24e61322fd9b4114013c1f4b135c7f0
- SHA512 4896f0b945dce4f68ff8814fadf266e311e45da6fa87127ad35d7792e95841809cdb291bb732b10d3dc1a232aced66ca172633f9e2b8eb0199e049e429b969b1
- SSDEEP 49152:5umKCy6ZsUmbl5mLBSDf5FA330fsUdp9W4LUmO0GG+WC:rJOB264
- TLSH T1EAB58E17F29A10D8D05ED178CB5A8232EAB17C490B25B5DF0794BA252F37EE45B3EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext