General
- Target 2026-11-05_3f0123c6dcfe7d404b0547f4352d75d9_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 341KB
- Sample261107-dw56madh43
- SHA256 189f2d3a75e1c062d5362dcf803c18aab54c0b365a511189c180617a5b0230f7
- MD5 3f0123c6dcfe7d404b0547f4352d75d9
- SHA1 1ac409b322068f9fc17b283369f7016626d27231
- SHA512 6a69317485d5982ae56bae68bd1f484674b16414ea8581dbeac6fcf55f0575517758110dc3237bd22d7de49a46682527a3720e0f845caa5985ff6af47cd1ce2c
- SSDEEP 6144:D9CxvTHllOXWiYG6kFUpy3UNAUivT0V7:D0x7OXPdrUMkNBivT
- TLSH T17C749D95B7A408F5ECB7C13EC8518912E6B2BC5907A0C69F13B436561F333A11D3EBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-05_3f0123c6dcfe7d404b0547f4352d75d9_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-05_3f0123c6dcfe7d404b0547f4352d75d9_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-05_3f0123c6dcfe7d404b0547f4352d75d9_blankgrabber_cobalt-strike_icedid_luca-stealer_njrat_satacom_vidar
- Size 341KB
- SHA256 189f2d3a75e1c062d5362dcf803c18aab54c0b365a511189c180617a5b0230f7
- MD5 3f0123c6dcfe7d404b0547f4352d75d9
- SHA1 1ac409b322068f9fc17b283369f7016626d27231
- SHA512 6a69317485d5982ae56bae68bd1f484674b16414ea8581dbeac6fcf55f0575517758110dc3237bd22d7de49a46682527a3720e0f845caa5985ff6af47cd1ce2c
- SSDEEP 6144:D9CxvTHllOXWiYG6kFUpy3UNAUivT0V7:D0x7OXPdrUMkNBivT
- TLSH T17C749D95B7A408F5ECB7C13EC8518912E6B2BC5907A0C69F13B436561F333A11D3EBA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext