General
- Target 2026-08-18_25bf7e774af9642acfb5ef2a8326b5dc_cobalt-strike_icedid_njrat_satacom_vidar
- Size 666KB
- Sample260818-cyp2ravxav
- SHA256 5e8731f0deef08fe7a593b300613fd171aa731d08378659b69e7c5f532a69998
- MD5 25bf7e774af9642acfb5ef2a8326b5dc
- SHA1 82d00ca88df46f3db22d52e517f8aae129802787
- SHA512 ae2bd5605cf0940cc7dbc1eb3acd381982a20115c5a6d3254000035497846a8b07c5c77621e9bf9c1bb2ef2898621992423a2c8d838472dc1473f13dca2c4c04
- SSDEEP 12288:YCvYe5FrwtH1SPoTYAWdXQNd2wBxI7ozO0vzmEl:5vYejr81SAbdVUqFzz
- TLSH T133E4AE45EBA405F9D1BFC03889665553E272780903A0EBEB27A4D6761F33AE15E3EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_25bf7e774af9642acfb5ef2a8326b5dc_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_25bf7e774af9642acfb5ef2a8326b5dc_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_25bf7e774af9642acfb5ef2a8326b5dc_cobalt-strike_icedid_njrat_satacom_vidar
- Size 666KB
- SHA256 5e8731f0deef08fe7a593b300613fd171aa731d08378659b69e7c5f532a69998
- MD5 25bf7e774af9642acfb5ef2a8326b5dc
- SHA1 82d00ca88df46f3db22d52e517f8aae129802787
- SHA512 ae2bd5605cf0940cc7dbc1eb3acd381982a20115c5a6d3254000035497846a8b07c5c77621e9bf9c1bb2ef2898621992423a2c8d838472dc1473f13dca2c4c04
- SSDEEP 12288:YCvYe5FrwtH1SPoTYAWdXQNd2wBxI7ozO0vzmEl:5vYejr81SAbdVUqFzz
- TLSH T133E4AE45EBA405F9D1BFC03889665553E272780903A0EBEB27A4D6761F33AE15E3EF10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext