General

  • Target
    2026-10-02_f329747b00e08125e62cedf6c53e287d_cobalt-strike_icedid_njrat_satacom_vidar
  • Size 5.7MB
  • Sample261002-2kkbsavblc
  • SHA256 68d2b7c3b4d6b47bc64ebeaa46cc98be5cc835bf7fc0d1ba1b450d5d1734a137
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-02_f329747b00e08125e62cedf6c53e287d_cobalt-strike_icedid_njrat_satacom_vidar
    • Size 5.7MB
    • SHA256 68d2b7c3b4d6b47bc64ebeaa46cc98be5cc835bf7fc0d1ba1b450d5d1734a137
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks