General
- Target 2026-09-13_ffb563cbd1ffe8aedaf7c72772a13007_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 203KB
- Sample260913-3pbe4sshmb
- SHA256 2ef3781d1be12ddd3b86df84d9c63a2da60c25bf664228e7e61f2006fda342ec
- MD5 ffb563cbd1ffe8aedaf7c72772a13007
- SHA1 5899b1843dac33cc585b25991a3b327a383376a0
- SHA512 9849fae5fbb3ec1240c6e8c78ba5faba3ddf6c0b15f1ae0d5a9c947a433b0f8fc7571bfebc758c3bb283c31bbc7b0318bc7e9bc5dc59ebef9c8b9f2d02921c7e
- SSDEEP 3072:n+/BpOvudd7JDF30af3UmB30wv5PGIMov2QpHRxI7AUJsrmUVOcd5oEEUY6+WSvm:NvudZJp30u31EwZGIMs2QprQWp5
- TLSH T173148D07B79131E5E17B9638C4A10657B773B8324760DBAF07A4826A1F332D19E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-13_ffb563cbd1ffe8aedaf7c72772a13007_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_ffb563cbd1ffe8aedaf7c72772a13007_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_ffb563cbd1ffe8aedaf7c72772a13007_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 203KB
- SHA256 2ef3781d1be12ddd3b86df84d9c63a2da60c25bf664228e7e61f2006fda342ec
- MD5 ffb563cbd1ffe8aedaf7c72772a13007
- SHA1 5899b1843dac33cc585b25991a3b327a383376a0
- SHA512 9849fae5fbb3ec1240c6e8c78ba5faba3ddf6c0b15f1ae0d5a9c947a433b0f8fc7571bfebc758c3bb283c31bbc7b0318bc7e9bc5dc59ebef9c8b9f2d02921c7e
- SSDEEP 3072:n+/BpOvudd7JDF30af3UmB30wv5PGIMov2QpHRxI7AUJsrmUVOcd5oEEUY6+WSvm:NvudZJp30u31EwZGIMs2QprQWp5
- TLSH T173148D07B79131E5E17B9638C4A10657B773B8324760DBAF07A4826A1F332D19E3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext