General
- Target 2026-08-12_0c3d8f0408cb0e947211b3aecfe25e4a_cobalt-strike_icedid_njrat_qakbot_satacom_stealc_vidar
- Size 2.7MB
- Sample260812-tk28la1amb
- SHA256 7f84255996a11a4034e80017b05fda810f2948e51cde543865820e6cebac1f5b
- MD5 0c3d8f0408cb0e947211b3aecfe25e4a
- SHA1 d3b8f2f3f029868ff46dba9461da1a7c73c726a4
- SHA512 1ae679ac4a73cf5c9d9b77f90e4f8f50f2bc8dc37563ed50c384f26115cd8cb85e30f16bc92865fc7a42aa71cfaad555a8325005b2b003dfe11b30d6f6006e7e
- SSDEEP 49152:yxePOqbEc9zkUQIz+r3OvjgA0Xb8hNvVVdD3vOMmDDuAMBg65d:NEykvXivfuuAszd
- TLSH T1FDD5AD43F25601E9C07BD034C99A9717F774B80903209AFB87E499656F53AE0AF7B392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_0c3d8f0408cb0e947211b3aecfe25e4a_cobalt-strike_icedid_njrat_qakbot_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_0c3d8f0408cb0e947211b3aecfe25e4a_cobalt-strike_icedid_njrat_qakbot_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_0c3d8f0408cb0e947211b3aecfe25e4a_cobalt-strike_icedid_njrat_qakbot_satacom_stealc_vidar
- Size 2.7MB
- SHA256 7f84255996a11a4034e80017b05fda810f2948e51cde543865820e6cebac1f5b
- MD5 0c3d8f0408cb0e947211b3aecfe25e4a
- SHA1 d3b8f2f3f029868ff46dba9461da1a7c73c726a4
- SHA512 1ae679ac4a73cf5c9d9b77f90e4f8f50f2bc8dc37563ed50c384f26115cd8cb85e30f16bc92865fc7a42aa71cfaad555a8325005b2b003dfe11b30d6f6006e7e
- SSDEEP 49152:yxePOqbEc9zkUQIz+r3OvjgA0Xb8hNvVVdD3vOMmDDuAMBg65d:NEykvXivfuuAszd
- TLSH T1FDD5AD43F25601E9C07BD034C99A9717F774B80903209AFB87E499656F53AE0AF7B392
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext