General
- Target 2026-09-04_a80820967357f50dbb932a5ddf22d4cc_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom
- Size 97.0MB
- Sample260905-beek8scn5t
- SHA256 315d208a0d36a046b808366d88c37bc001004db613b3785095a297a3e3242949
- MD5 a80820967357f50dbb932a5ddf22d4cc
- SHA1 cf9b3d7002e396b8d61e1d66c4714a64b42daa5c
- SHA512 bd2446439ec412b70e4ba27a6a24a4223e63e46283f856d7c098a8c2c9fd590c35da6166eb48e2ae436e16ad091efcff31056510f01c4271baddbeab891935fd
- SSDEEP 1572864:i4xQT1TApDqzX2QNgeweka0l/m23HD6g8PZ3oDqK5TyID:irTAwz2S0Z3D9Mozy
- TLSH T15B2805159242D714DC8E30B7A84457EE05FEF5C724A870F8E3CE4B288695FA1E9624FB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_a80820967357f50dbb932a5ddf22d4cc_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_a80820967357f50dbb932a5ddf22d4cc_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom
- Size 97.0MB
- SHA256 315d208a0d36a046b808366d88c37bc001004db613b3785095a297a3e3242949
- MD5 a80820967357f50dbb932a5ddf22d4cc
- SHA1 cf9b3d7002e396b8d61e1d66c4714a64b42daa5c
- SHA512 bd2446439ec412b70e4ba27a6a24a4223e63e46283f856d7c098a8c2c9fd590c35da6166eb48e2ae436e16ad091efcff31056510f01c4271baddbeab891935fd
- SSDEEP 1572864:i4xQT1TApDqzX2QNgeweka0l/m23HD6g8PZ3oDqK5TyID:irTAwz2S0Z3D9Mozy
- TLSH T15B2805159242D714DC8E30B7A84457EE05FEF5C724A870F8E3CE4B288695FA1E9624FB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE