General
- Target 2026-09-15_f2d090df09085833170d647770d263af_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 305KB
- Sample260915-zztsnadn8t
- SHA256 c66db5f91b000f42c4be21e48f223451ad3543794a1f2a1ef377c46a35cc9b28
- MD5 f2d090df09085833170d647770d263af
- SHA1 053ac51a19966a35ec4858efb9d65d36a44691b9
- SHA512 09dbbe7d138790bbe7b35f123140a285bd076cb6b3c126e56b1d4cde9250733024644ff1e3bf9ad9cd5d496c04f08e22f98a99f957be4cd6f005d7fdfcb8d32e
- SSDEEP 3072:QsuDTsg9J1zThIPp8W0/G7pXE94mbdc+7QI+Bk+JKbuAs0FNmhMn+IhN8/MS6HI1:f5YrzmSRjc+7dSDvYlo1
- TLSH T1DB646B06779A01E5D0B68134877747E2AB3D3D125791CA8F13D47766AE3E2C0BD2AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-15_f2d090df09085833170d647770d263af_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-15_f2d090df09085833170d647770d263af_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-15_f2d090df09085833170d647770d263af_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 305KB
- SHA256 c66db5f91b000f42c4be21e48f223451ad3543794a1f2a1ef377c46a35cc9b28
- MD5 f2d090df09085833170d647770d263af
- SHA1 053ac51a19966a35ec4858efb9d65d36a44691b9
- SHA512 09dbbe7d138790bbe7b35f123140a285bd076cb6b3c126e56b1d4cde9250733024644ff1e3bf9ad9cd5d496c04f08e22f98a99f957be4cd6f005d7fdfcb8d32e
- SSDEEP 3072:QsuDTsg9J1zThIPp8W0/G7pXE94mbdc+7QI+Bk+JKbuAs0FNmhMn+IhN8/MS6HI1:f5YrzmSRjc+7dSDvYlo1
- TLSH T1DB646B06779A01E5D0B68134877747E2AB3D3D125791CA8F13D47766AE3E2C0BD2AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext