General
- Target 2026-08-27_b18ab9bdf0a87f65ef304486db9a17ce_cobalt-strike_icedid_njrat_qakbot_satacom_vidar
- Size 1.1MB
- Sample260827-merrcashjc
- SHA256 e5f5a4dec2baf930965826e6f39ca74a39264c4ae514bcb1fceb9d7131f8bd07
- MD5 b18ab9bdf0a87f65ef304486db9a17ce
- SHA1 e0e04dbd3875b2b2a35e90bed60f21bc22e9b1a2
- SHA512 a204ab7bbc27f1deebd7383c2c377e7b896cec9a9556385f8e147463b98c54b6dbf92ebbacc04339ee98ed459ec7d4719bc967d594c2a74bb051a39d1e56c128
- SSDEEP 24576:j0vdjiTJjs0VSby/CWAB6PQKXDIffBLczMp093:j0vdcJjHSyC1BqTXD6m4p6
- TLSH T1DA45BF05B5A694F9D47B8074C69AE55BE2713C1903209AFB63E04A6A2F33FD01F7B721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_b18ab9bdf0a87f65ef304486db9a17ce_cobalt-strike_icedid_njrat_qakbot_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_b18ab9bdf0a87f65ef304486db9a17ce_cobalt-strike_icedid_njrat_qakbot_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_b18ab9bdf0a87f65ef304486db9a17ce_cobalt-strike_icedid_njrat_qakbot_satacom_vidar
- Size 1.1MB
- SHA256 e5f5a4dec2baf930965826e6f39ca74a39264c4ae514bcb1fceb9d7131f8bd07
- MD5 b18ab9bdf0a87f65ef304486db9a17ce
- SHA1 e0e04dbd3875b2b2a35e90bed60f21bc22e9b1a2
- SHA512 a204ab7bbc27f1deebd7383c2c377e7b896cec9a9556385f8e147463b98c54b6dbf92ebbacc04339ee98ed459ec7d4719bc967d594c2a74bb051a39d1e56c128
- SSDEEP 24576:j0vdjiTJjs0VSby/CWAB6PQKXDIffBLczMp093:j0vdcJjHSyC1BqTXD6m4p6
- TLSH T1DA45BF05B5A694F9D47B8074C69AE55BE2713C1903209AFB63E04A6A2F33FD01F7B721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext