General
- Target 2026-08-20_085c1b4b58542142cddd5ca61547f8b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.2MB
- Sample260820-thcvxstyft
- SHA256 3c34973aa5051cf524fa9875d3343258708a26842a9cf4ad0ba3bfb1ccde24d8
- MD5 085c1b4b58542142cddd5ca61547f8b9
- SHA1 33143bd97c120f13d87a9ab288b71e7ff12866e6
- SHA512 78c9bd4a9f952ad0c8b739e9f61a6ec6160aaf4e6e272686c0783885a9573053b4a5da344ad2eb7c8d8588c695034438df406949614611ef79d83c4040a4e09e
- SSDEEP 98304:8QiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:8zFytO1s/ihSxJAyJh3E5uBO
- TLSH T12056CE276D555453E41DC4BAE392562553B0EF3F2581CAE32040BBB178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_085c1b4b58542142cddd5ca61547f8b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_085c1b4b58542142cddd5ca61547f8b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_085c1b4b58542142cddd5ca61547f8b9_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc
- Size 6.2MB
- SHA256 3c34973aa5051cf524fa9875d3343258708a26842a9cf4ad0ba3bfb1ccde24d8
- MD5 085c1b4b58542142cddd5ca61547f8b9
- SHA1 33143bd97c120f13d87a9ab288b71e7ff12866e6
- SHA512 78c9bd4a9f952ad0c8b739e9f61a6ec6160aaf4e6e272686c0783885a9573053b4a5da344ad2eb7c8d8588c695034438df406949614611ef79d83c4040a4e09e
- SSDEEP 98304:8QiFytO1s/YLceSxJAyJh3ETWvR/2uWujfoTcBqNUK:8zFytO1s/ihSxJAyJh3E5uBO
- TLSH T12056CE276D555453E41DC4BAE392562553B0EF3F2581CAE32040BBB178E23E4FAADF88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Detects executables referencing many IR and analysis tools
-
Suspicious use of SetThreadContext