General
- Target 2026-10-27_e81ec818439b2dc67b6e98506ea30051_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 392KB
- Sample261027-3pqvssws5k
- SHA256 ac340820f74d48bcb6dcd1797e00649e70a2a42e23e7a91457727b1fd8fbdf47
- MD5 e81ec818439b2dc67b6e98506ea30051
- SHA1 8781c2d0f5ee41a8bd0333997660e19c2a63cbf6
- SHA512 8a00e1ee02ab9f1cdc42ae7eaf8ad34ee35587f638faec07e130923e88f374f843ba1b62f3e87539e1d13be45264493960d1f64171443a79bd7452b305902092
- SSDEEP 6144:xHlSHL0sLeljMiBwkyPnYeP1jJLSGtouZFvSarItjQauHzx+s:xF6Y5ryfPP1jx5FFvSarI5JuTx+
- TLSH T109847D15F3E404F8F5BB8174C992CA1AE6B27C5607B0D6CF23A486963F336619D2DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-27_e81ec818439b2dc67b6e98506ea30051_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-27_e81ec818439b2dc67b6e98506ea30051_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-27_e81ec818439b2dc67b6e98506ea30051_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 392KB
- SHA256 ac340820f74d48bcb6dcd1797e00649e70a2a42e23e7a91457727b1fd8fbdf47
- MD5 e81ec818439b2dc67b6e98506ea30051
- SHA1 8781c2d0f5ee41a8bd0333997660e19c2a63cbf6
- SHA512 8a00e1ee02ab9f1cdc42ae7eaf8ad34ee35587f638faec07e130923e88f374f843ba1b62f3e87539e1d13be45264493960d1f64171443a79bd7452b305902092
- SSDEEP 6144:xHlSHL0sLeljMiBwkyPnYeP1jJLSGtouZFvSarItjQauHzx+s:xF6Y5ryfPP1jx5FFvSarI5JuTx+
- TLSH T109847D15F3E404F8F5BB8174C992CA1AE6B27C5607B0D6CF23A486963F336619D2DB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext