General
- Target 2026-08-23_d28a757d2b9d3c6b58588b31dafe0d0f_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.4MB
- Sample260823-ysx13abb84
- SHA256 50684a273af55dc7e58ca8119b6a4b482ab7b264950c9a4db6254b72ad81407e
- MD5 d28a757d2b9d3c6b58588b31dafe0d0f
- SHA1 c4052c96692761e0718b99a3c46b91272a5af9f8
- SHA512 6f7cdb2601ac38d412cd80d44a13efc0d2a65b0c86e8a5f4169085b09d7f1e1b6012eec001c4cf3d4523f1112cf4276a32189648cae5e3b9af7e1e120447a505
- SSDEEP 24576:WlUaHx9uqDJU2Fmx5XCUODpxrlFZu3djlfa/uhFzzhpFzz:DaH7hdbmx5XCUODpxrlFZu3djla/sFXl
- TLSH T1A0657D1ABB6810E9D1BEC179D9429907E7B2740B03A09ADF179047973F37AD48F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_d28a757d2b9d3c6b58588b31dafe0d0f_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_d28a757d2b9d3c6b58588b31dafe0d0f_cobalt-strike_icedid_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_d28a757d2b9d3c6b58588b31dafe0d0f_cobalt-strike_icedid_njrat_satacom_stealc_vidar
- Size 1.4MB
- SHA256 50684a273af55dc7e58ca8119b6a4b482ab7b264950c9a4db6254b72ad81407e
- MD5 d28a757d2b9d3c6b58588b31dafe0d0f
- SHA1 c4052c96692761e0718b99a3c46b91272a5af9f8
- SHA512 6f7cdb2601ac38d412cd80d44a13efc0d2a65b0c86e8a5f4169085b09d7f1e1b6012eec001c4cf3d4523f1112cf4276a32189648cae5e3b9af7e1e120447a505
- SSDEEP 24576:WlUaHx9uqDJU2Fmx5XCUODpxrlFZu3djlfa/uhFzzhpFzz:DaH7hdbmx5XCUODpxrlFZu3djla/sFXl
- TLSH T1A0657D1ABB6810E9D1BEC179D9429907E7B2740B03A09ADF179047973F37AD48F39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext