General

  • Target
    2026-09-04_a80820967357f50dbb932a5ddf22d4cc_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom
  • Size 97.0MB
  • Sample260905-beek8scn5t
  • SHA256 315d208a0d36a046b808366d88c37bc001004db613b3785095a297a3e3242949
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-04_a80820967357f50dbb932a5ddf22d4cc_cobalt-strike_darkgate_gcleaner_icedid_njrat_satacom
    • Size 97.0MB
    • SHA256 315d208a0d36a046b808366d88c37bc001004db613b3785095a297a3e3242949
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v16

Tasks