General
- Target 2026-08-17_9d7f9719f547862adf8455c5b6b2cb17_cobalt-strike_icedid_njrat_satacom_vidar
- Size 744KB
- Sample260817-p35dfs1anf
- SHA256 50e9a929e95feeb5de678c295e12e0d07b199c7df62173d1ce67fad4528aef0f
- MD5 9d7f9719f547862adf8455c5b6b2cb17
- SHA1 d91e87481f29b630843645ef542adf8aaa579a5b
- SHA512 2946b7dddddeae3b9445d093f42fbee5bdc030208729bc718c1d8c4684c2cec0953cead78eac965a6e6e640bd4bf7c3679f8dd43618d0d88e7cfb6618edbd787
- SSDEEP 12288:kRSUR6S40svEoYSJbSRD6lJC0Yfsllr+RHXUEO0vzmEl:AV0EYBWD6lM0QsllyREEFzz
- TLSH T136F4E197EFA660EDE0BE9478C5665C57E762B42A03E0DBCF174046930E732909E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_9d7f9719f547862adf8455c5b6b2cb17_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_9d7f9719f547862adf8455c5b6b2cb17_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_9d7f9719f547862adf8455c5b6b2cb17_cobalt-strike_icedid_njrat_satacom_vidar
- Size 744KB
- SHA256 50e9a929e95feeb5de678c295e12e0d07b199c7df62173d1ce67fad4528aef0f
- MD5 9d7f9719f547862adf8455c5b6b2cb17
- SHA1 d91e87481f29b630843645ef542adf8aaa579a5b
- SHA512 2946b7dddddeae3b9445d093f42fbee5bdc030208729bc718c1d8c4684c2cec0953cead78eac965a6e6e640bd4bf7c3679f8dd43618d0d88e7cfb6618edbd787
- SSDEEP 12288:kRSUR6S40svEoYSJbSRD6lJC0Yfsllr+RHXUEO0vzmEl:AV0EYBWD6lM0QsllyREEFzz
- TLSH T136F4E197EFA660EDE0BE9478C5665C57E762B42A03E0DBCF174046930E732909E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext