General

  • Target
    2026-09-03_ce9283a71ada960924ab9b8f7dd5b3cb_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom
  • Size 97.0MB
  • Sample260903-2ach7attby
  • SHA256 df53573047a882a850015e1c6170bf38776ff282b0aadb6e78cf21d6fba5b996
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-03_ce9283a71ada960924ab9b8f7dd5b3cb_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom
    • Size 97.0MB
    • SHA256 df53573047a882a850015e1c6170bf38776ff282b0aadb6e78cf21d6fba5b996
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks