General
- Target 2026-08-20_352317ef8e7ff755043f9b60fb878683_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.5MB
- Sample260820-s6zh6aec64
- SHA256 010573fb97d2af1d2a695af2af0312d9427a7aa0a895dcadb673df28b01a819b
- MD5 352317ef8e7ff755043f9b60fb878683
- SHA1 5d55818390e7d4602b3e3aee7dc62f15f6b1844b
- SHA512 454c9be6db8e318a159adb84e3eb497f319ec075cf2d7a3be5971bf46416ffc1524d024c4ebe27c844d2496c9ae91d7eed55841a001de02050f35aa759d1c1d8
- SSDEEP 98304:aQiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:azFytO1s/ihSxJAyJh3E5uBO
- TLSH T1FE66CF27AE555453E41DC4B9E392562153B0EF3F2581CAE72040B7B178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_352317ef8e7ff755043f9b60fb878683_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_352317ef8e7ff755043f9b60fb878683_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_352317ef8e7ff755043f9b60fb878683_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.5MB
- SHA256 010573fb97d2af1d2a695af2af0312d9427a7aa0a895dcadb673df28b01a819b
- MD5 352317ef8e7ff755043f9b60fb878683
- SHA1 5d55818390e7d4602b3e3aee7dc62f15f6b1844b
- SHA512 454c9be6db8e318a159adb84e3eb497f319ec075cf2d7a3be5971bf46416ffc1524d024c4ebe27c844d2496c9ae91d7eed55841a001de02050f35aa759d1c1d8
- SSDEEP 98304:aQiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:azFytO1s/ihSxJAyJh3E5uBO
- TLSH T1FE66CF27AE555453E41DC4B9E392562153B0EF3F2581CAE72040B7B178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables referencing many IR and analysis tools
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext