darksiderat | 48cc55f2e4a77021d392af8acbbb13f1b6ecf652bdd31cbe67525062348dcacd

General

Target
2026-08-25_6b6e26133dc3385d599c14a987ad299d_glassworm_icedid_luca-stealer_njrat_stealc_vidar
Size 30.8MB
Sample260826-2ct61svwbs
SHA256 48cc55f2e4a77021d392af8acbbb13f1b6ecf652bdd31cbe67525062348dcacd
MD5 6b6e26133dc3385d599c14a987ad299d
SHA1 fbdc2fef8ca14205d4e21640acdf4389ce8ee787
SHA512 550762599d5085363d17d3985cf2367d6dfdc2927b16ca05da30c8e41ca2e1c57461449f4aea33cb2f502b47f04d5a0e7a190d85e260ce27795146b61dc43af5
SSDEEP 393216:WQKxOxaJAz3ccNLkddcSG4F4N6DdvhN/i18EczA7nfoPDpwQSpQoWTl5fET45OdJ:zkddclNJNfSpzAwl95OEK
TLSH
T1B767F147A3D60399CFA3E53DD1139313E272BC96232186D76B9C0A269F17BE0597EB04
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-08-25_6b6e26133dc3385d599c14a987ad299d_glassworm_icedid_luca-stealer_njrat_stealc_vidar
- Size 30.8MB
- SHA256 48cc55f2e4a77021d392af8acbbb13f1b6ecf652bdd31cbe67525062348dcacd
- MD5 6b6e26133dc3385d599c14a987ad299d
- SHA1 fbdc2fef8ca14205d4e21640acdf4389ce8ee787
- SHA512 550762599d5085363d17d3985cf2367d6dfdc2927b16ca05da30c8e41ca2e1c57461449f4aea33cb2f502b47f04d5a0e7a190d85e260ce27795146b61dc43af5
- SSDEEP 393216:WQKxOxaJAz3ccNLkddcSG4F4N6DdvhN/i18EczA7nfoPDpwQSpQoWTl5fET45OdJ:zkddclNJNfSpzAwl95OEK
- TLSH
  T1B767F147A3D60399CFA3E53DD1139313E272BC96232186D76B9C0A269F17BE0597EB04
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

execution darksiderat trojan
- Detects DarkSideRAT
- Family: DarkSideRAT
  DarkSideRAT is a remote access trojan.
  trojan darksiderat
- Badlisted process makes network request
  Network request originating from process or tool commonly abused by malware.
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Downloads MZ/PE file
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

2

T1059

PowerShell

1

T1059.001

Windows Command Shell

1

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects DarkSideRAT

Family: DarkSideRAT

Badlisted process makes network request

Command and Scripting Interpreter: PowerShell

Downloads MZ/PE file

Executes dropped EXE

Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2