General

  • Target
    2026-11-03_93e85b9f101abe2cd42955ea0befec05_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
  • Size 3.7MB
  • Sample261104-qwd4cs11ct
  • SHA256 d3945a3b14ee0b7cf3775f8515a1c5a08b1f10533ee6e5cfbb9bccb352172f8c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-11-03_93e85b9f101abe2cd42955ea0befec05_cobalt-strike_coinminer_glassworm_icedid_njrat_satacom_stealc_vidar
    • Size 3.7MB
    • SHA256 d3945a3b14ee0b7cf3775f8515a1c5a08b1f10533ee6e5cfbb9bccb352172f8c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects DarkSideRAT

    • Family: DarkSideRAT

      DarkSideRAT is a remote access trojan.

    • Modifies file permissions

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks