General
- Target 2026-09-04_6099f77cf34bab634472d3dfdc0c1c58_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.6MB
- Sample260905-k761maysct
- SHA256 0b6a26af309f675be2a4684ed067aa30741b0da76f3e72ed92e6a2452a44d4be
- MD5 6099f77cf34bab634472d3dfdc0c1c58
- SHA1 d39873b91357a6851d3560b80edea32e9e2f839f
- SHA512 daf1719877fea6775af97916d2124f7a1d8ba80d7e56c985cf3e0c217fb3672c91403bd3bb9a581ac53699c78e83d2c159a36d675aeafb8282dc7ab9fb81ee95
- SSDEEP 24576:uHEiANM+NFzzVFzzKFzznFzzFFzzOFzzfFzzVFzz:nS+NFXVFXKFXnFXFFXOFXfFXVFX
- TLSH T1E075E006EF9F3EDDE0BEC479947560F76760B81E01D0DDDE2990B2631E72A51BA18E20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_6099f77cf34bab634472d3dfdc0c1c58_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_6099f77cf34bab634472d3dfdc0c1c58_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_6099f77cf34bab634472d3dfdc0c1c58_cobalt-strike_hijackloader_icedid_luca-stealer_njrat_satacom_vidar
- Size 1.6MB
- SHA256 0b6a26af309f675be2a4684ed067aa30741b0da76f3e72ed92e6a2452a44d4be
- MD5 6099f77cf34bab634472d3dfdc0c1c58
- SHA1 d39873b91357a6851d3560b80edea32e9e2f839f
- SHA512 daf1719877fea6775af97916d2124f7a1d8ba80d7e56c985cf3e0c217fb3672c91403bd3bb9a581ac53699c78e83d2c159a36d675aeafb8282dc7ab9fb81ee95
- SSDEEP 24576:uHEiANM+NFzzVFzzKFzznFzzFFzzOFzzfFzzVFzz:nS+NFXVFXKFXnFXFFXOFXfFXVFX
- TLSH T1E075E006EF9F3EDDE0BEC479947560F76760B81E01D0DDDE2990B2631E72A51BA18E20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext