General
- Target 2026-10-22_c9998bb4f8bee8e92d5eb09ac93c2798_cobalt-strike_icedid_njrat_satacom_vidar
- Size 2.9MB
- Sample261023-zfd8vsde98
- SHA256 59a979205c6b16f385bc3e1ec05c005bb444ded625730709aa8a001cad851907
- MD5 c9998bb4f8bee8e92d5eb09ac93c2798
- SHA1 4e01d6e9d1913b89d97bea1d7bb3b5cc46b4ecf6
- SHA512 d1122218b712c6333e8f855e68aed5823b87d95f8a69976897389d7d240bd28f0c913151104c054de968b3f6a4ca7d1af260f8a96fd2e3c4c3b5c474931a1e11
- SSDEEP 12288:ngw7UyRU7WNI/FdbFrttOj4R5riFJnO+xtb5QqvcJCCFVdRTLns:gw709dZreE5MJnO+xsqvcgCFVbc
- TLSH T1A0D5E60757A23A86D610643512A43228CE9DCF48CF7FDBF2AC8EB6E4D9F65C38594634
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_c9998bb4f8bee8e92d5eb09ac93c2798_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_c9998bb4f8bee8e92d5eb09ac93c2798_cobalt-strike_icedid_njrat_satacom_vidar
- Size 2.9MB
- SHA256 59a979205c6b16f385bc3e1ec05c005bb444ded625730709aa8a001cad851907
- MD5 c9998bb4f8bee8e92d5eb09ac93c2798
- SHA1 4e01d6e9d1913b89d97bea1d7bb3b5cc46b4ecf6
- SHA512 d1122218b712c6333e8f855e68aed5823b87d95f8a69976897389d7d240bd28f0c913151104c054de968b3f6a4ca7d1af260f8a96fd2e3c4c3b5c474931a1e11
- SSDEEP 12288:ngw7UyRU7WNI/FdbFrttOj4R5riFJnO+xtb5QqvcJCCFVdRTLns:gw709dZreE5MJnO+xsqvcgCFVbc
- TLSH T1A0D5E60757A23A86D610643512A43228CE9DCF48CF7FDBF2AC8EB6E4D9F65C38594634
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext