General
- Target 2026-08-18_dc60ece597ee3a0b835109a8033b62ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 642KB
- Sample260818-g6k5zsysgs
- SHA256 cb632464b14e1f90246e7f5aedb0e944420045a34d6a389614e58e26ab278f67
- MD5 dc60ece597ee3a0b835109a8033b62ec
- SHA1 b2b9377e306beeee71df405d99907f28e50928c5
- SHA512 1ff42fa2dcced4f27e3d536c5a6b8b3b5a19df78d6c502a01746ec7429d5939897828cec486e95d138c56843fd74f7fea7c3f309463e7aea2bbc6be22cfa31fd
- SSDEEP 12288:wKOjJsDc2+WC+D+4H/xeGofENaTSqGCC709:wKyacgDD+4fwG1NaTSU
- TLSH T142E439D5A6EC32F8D3A681388876C52FE6717C4D035196CB13E06A673F226E15DFA720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_dc60ece597ee3a0b835109a8033b62ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_dc60ece597ee3a0b835109a8033b62ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_dc60ece597ee3a0b835109a8033b62ec_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 642KB
- SHA256 cb632464b14e1f90246e7f5aedb0e944420045a34d6a389614e58e26ab278f67
- MD5 dc60ece597ee3a0b835109a8033b62ec
- SHA1 b2b9377e306beeee71df405d99907f28e50928c5
- SHA512 1ff42fa2dcced4f27e3d536c5a6b8b3b5a19df78d6c502a01746ec7429d5939897828cec486e95d138c56843fd74f7fea7c3f309463e7aea2bbc6be22cfa31fd
- SSDEEP 12288:wKOjJsDc2+WC+D+4H/xeGofENaTSqGCC709:wKyacgDD+4fwG1NaTSU
- TLSH T142E439D5A6EC32F8D3A681388876C52FE6717C4D035196CB13E06A673F226E15DFA720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext