General

  • Target
    2026-08-11_ad8dbe86f083f76bedca66c661b92353_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
  • Size 1.5MB
  • Sample260811-c3c8rateke
  • SHA256 c3a3e7aac88e85a4645b21e599448bd1a18d3e58ffa61684e6f349eeed5f78b6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-11_ad8dbe86f083f76bedca66c661b92353_cobalt-strike_glassworm_icedid_njrat_satacom_stealc
    • Size 1.5MB
    • SHA256 c3a3e7aac88e85a4645b21e599448bd1a18d3e58ffa61684e6f349eeed5f78b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Detects executables embedding command execution via IExecuteCommand COM object

    • Detects executables referencing many IR and analysis tools

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks