General
- Target 2026-09-12_f05526f5db47580b39a45451fe1a19f7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.4MB
- Sample260912-shdxjsde84
- SHA256 e91eafcd2941bda6dafe973dffbf647fc56e5093bac9866403a61bae74973b0a
- MD5 f05526f5db47580b39a45451fe1a19f7
- SHA1 eac731538ad9b867a68b01e2f7b57a25f3f505ed
- SHA512 10de53534dec7a95acd32e9b8c0b4324c36b1fd1686fd6a26ca9e78a2583ae00cd12afa55b4500248603ebda4dcb2262412624ef1e2868f958b083d4ed037ea7
- SSDEEP 49152:j45tRSBJr7e3p5Yf+R1RgsSTNMQnI7NvRJCkgmi/azLzYtnfbhvf:cRWXeVRbNgT8LAJ
- TLSH T117F5BE43F35286ECC4169A38D662C312F7B67C101F39E6DF66841D45AEAB6F04EB9780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-12_f05526f5db47580b39a45451fe1a19f7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_f05526f5db47580b39a45451fe1a19f7_cobalt-strike_icedid_njrat_satacom_stealc.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_f05526f5db47580b39a45451fe1a19f7_cobalt-strike_icedid_njrat_satacom_stealc
- Size 3.4MB
- SHA256 e91eafcd2941bda6dafe973dffbf647fc56e5093bac9866403a61bae74973b0a
- MD5 f05526f5db47580b39a45451fe1a19f7
- SHA1 eac731538ad9b867a68b01e2f7b57a25f3f505ed
- SHA512 10de53534dec7a95acd32e9b8c0b4324c36b1fd1686fd6a26ca9e78a2583ae00cd12afa55b4500248603ebda4dcb2262412624ef1e2868f958b083d4ed037ea7
- SSDEEP 49152:j45tRSBJr7e3p5Yf+R1RgsSTNMQnI7NvRJCkgmi/azLzYtnfbhvf:cRWXeVRbNgT8LAJ
- TLSH T117F5BE43F35286ECC4169A38D662C312F7B67C101F39E6DF66841D45AEAB6F04EB9780
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Downloads MZ/PE file
-
Executes dropped EXE