General
- Target 2026-11-05_dcd66869be3fe7790c50d797e114f16b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 520KB
- Sample261106-hg28msbb99
- SHA256 5cabba931f7a5b8905786792d71c164b81622d78a58089715ecdb6525e5e03bb
- MD5 dcd66869be3fe7790c50d797e114f16b
- SHA1 24552ac026b8b6b184d5d838ef64d953996ca7d3
- SHA512 b55eccaef9210027ba99be4d245cacde8a188b844959655f3f01891c80ff275466a9a0ded62e59ea910434b229bf5ae700e22e694b42724c902b7fc5864b3b4d
- SSDEEP 6144:V/kHlmA9J4gr5RV0nIdguOPVI2rIxpX1fLo+NZy/KWZaYvEV1:V/2mA9ygrfGXu8IxT0+NZJYv
- TLSH T1C8B46B90A3E401E8F1B79A35CD664512DA767C5A1B60DECF03A4666A1F33BD18D3CF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-05_dcd66869be3fe7790c50d797e114f16b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-05_dcd66869be3fe7790c50d797e114f16b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-05_dcd66869be3fe7790c50d797e114f16b_cobalt-strike_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 520KB
- SHA256 5cabba931f7a5b8905786792d71c164b81622d78a58089715ecdb6525e5e03bb
- MD5 dcd66869be3fe7790c50d797e114f16b
- SHA1 24552ac026b8b6b184d5d838ef64d953996ca7d3
- SHA512 b55eccaef9210027ba99be4d245cacde8a188b844959655f3f01891c80ff275466a9a0ded62e59ea910434b229bf5ae700e22e694b42724c902b7fc5864b3b4d
- SSDEEP 6144:V/kHlmA9J4gr5RV0nIdguOPVI2rIxpX1fLo+NZy/KWZaYvEV1:V/2mA9ygrfGXu8IxT0+NZJYv
- TLSH T1C8B46B90A3E401E8F1B79A35CD664512DA767C5A1B60DECF03A4666A1F33BD18D3CF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Suspicious use of SetThreadContext