General
- Target 2026-11-03_2f3ce2c790315219bc27565d8d1779ab_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 704KB
- Sample261105-a2en3sg13p
- SHA256 f80491353125e159fcc4761258b505d793e0c8f3a5b47a3928b53ce80ce6151c
- MD5 2f3ce2c790315219bc27565d8d1779ab
- SHA1 fc8c45515fe9fe44ea3ebb62fd5bbbe049b538c0
- SHA512 f743e7cfae998a6ffc3c3afea1a565fffa1d1c0ab2f538f388508a85edd1bfda78988dcdd69a80ce03ddb407976e588e3a78b694ad058d6bc9b053b46ebe51b2
- SSDEEP 12288:KOPGZhRJmmE8jMtOdb26d8XUdO0vzmElHBAO0vzmEl:ih3mgMc/dRdFzzHyFzz
- TLSH T122E4E00BEF9621E9E07EC578C4915867E761B82907D0EBDF1B8049A30E72AD09F3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_2f3ce2c790315219bc27565d8d1779ab_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_2f3ce2c790315219bc27565d8d1779ab_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_2f3ce2c790315219bc27565d8d1779ab_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 704KB
- SHA256 f80491353125e159fcc4761258b505d793e0c8f3a5b47a3928b53ce80ce6151c
- MD5 2f3ce2c790315219bc27565d8d1779ab
- SHA1 fc8c45515fe9fe44ea3ebb62fd5bbbe049b538c0
- SHA512 f743e7cfae998a6ffc3c3afea1a565fffa1d1c0ab2f538f388508a85edd1bfda78988dcdd69a80ce03ddb407976e588e3a78b694ad058d6bc9b053b46ebe51b2
- SSDEEP 12288:KOPGZhRJmmE8jMtOdb26d8XUdO0vzmElHBAO0vzmEl:ih3mgMc/dRdFzzHyFzz
- TLSH T122E4E00BEF9621E9E07EC578C4915867E761B82907D0EBDF1B8049A30E72AD09F3DB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Suspicious use of SetThreadContext