General
- Target 2026-08-19_f3f0297f482d1b22a00595c43b104dc7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 532KB
- Sample260819-plkbystfph
- SHA256 b5d949fefaa03c73fc246a99e6d193c7520e7e1d2f25158acaa7350640e97d2f
- MD5 f3f0297f482d1b22a00595c43b104dc7
- SHA1 c038a1231955f9c275d6f3d6562ee5a6d2f23005
- SHA512 8608e911099187c8705b1481b1c1de12eab94ed8bf3d41520cfb7ef37a52dc7ad99cd20f1a4adea1083cea74b15b5dac27e1e3c72dc4322175d00bd93b7648bb
- SSDEEP 6144:99yTq1qdhmi+imwlnKCGe22xuUT/xrsw8uUiR9XU1hI3:/V1i+ARKCsmuUT/xQw/XU
- TLSH T10EC48E25EBA510FDE177D5B8C9624D02DB72BC8A0361AACF23904DA21F176D49F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_f3f0297f482d1b22a00595c43b104dc7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f3f0297f482d1b22a00595c43b104dc7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_f3f0297f482d1b22a00595c43b104dc7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 532KB
- SHA256 b5d949fefaa03c73fc246a99e6d193c7520e7e1d2f25158acaa7350640e97d2f
- MD5 f3f0297f482d1b22a00595c43b104dc7
- SHA1 c038a1231955f9c275d6f3d6562ee5a6d2f23005
- SHA512 8608e911099187c8705b1481b1c1de12eab94ed8bf3d41520cfb7ef37a52dc7ad99cd20f1a4adea1083cea74b15b5dac27e1e3c72dc4322175d00bd93b7648bb
- SSDEEP 6144:99yTq1qdhmi+imwlnKCGe22xuUT/xrsw8uUiR9XU1hI3:/V1i+ARKCsmuUT/xQw/XU
- TLSH T10EC48E25EBA510FDE177D5B8C9624D02DB72BC8A0361AACF23904DA21F176D49F3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Modifies file permissions