General
- Target 2026-08-12_8b273a75f4d83f0b75df144640b22c2c_cobalt-strike_icedid_njrat_satacom
- Size 479KB
- Sample260813-a2m1fsfh95
- SHA256 af3f2029f572ef9b36603322ea124bcb6e15b4c144dd1b6c1f12932127b005df
- MD5 8b273a75f4d83f0b75df144640b22c2c
- SHA1 2973d7680c83429c04fff1b36ff7aeed4f3eb2fe
- SHA512 1ea4c3a7404ccf0a30b55eb34beda8d6a9c4d21b028fb27e5f415a20b06695ef95ffa03f2c41c8515e762668df54e420f022ca61e3e053a2489f63a6faaac7db
- SSDEEP 6144:TWCUE9B58FNhaPTRJoPLg9xMvic86ElNMRJoPLg9xMvic86El:TWCUA5iXMO0vzmElmO0vzmEl
- TLSH T173A4D007EF9725E9E0BE8579D4A521A7A371742E07E0DEDF169082671E336D09E3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_8b273a75f4d83f0b75df144640b22c2c_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_8b273a75f4d83f0b75df144640b22c2c_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_8b273a75f4d83f0b75df144640b22c2c_cobalt-strike_icedid_njrat_satacom
- Size 479KB
- SHA256 af3f2029f572ef9b36603322ea124bcb6e15b4c144dd1b6c1f12932127b005df
- MD5 8b273a75f4d83f0b75df144640b22c2c
- SHA1 2973d7680c83429c04fff1b36ff7aeed4f3eb2fe
- SHA512 1ea4c3a7404ccf0a30b55eb34beda8d6a9c4d21b028fb27e5f415a20b06695ef95ffa03f2c41c8515e762668df54e420f022ca61e3e053a2489f63a6faaac7db
- SSDEEP 6144:TWCUE9B58FNhaPTRJoPLg9xMvic86ElNMRJoPLg9xMvic86El:TWCUA5iXMO0vzmElmO0vzmEl
- TLSH T173A4D007EF9725E9E0BE8579D4A521A7A371742E07E0DEDF169082671E336D09E3CB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext