General
- Target 2026-11-05_21c3a13a66f74a647034ee32b4bc3c47_cobalt-strike_icedid_njrat_satacom
- Size 276KB
- Sample261107-h441rawygz
- SHA256 8e8ae52c6bb00c321d797726ed809d3b7674132bd9b4c6e01f035f602ed8c694
- MD5 21c3a13a66f74a647034ee32b4bc3c47
- SHA1 f27c83124315bff02b98efb35395b2e34f63a5d4
- SHA512 177a667b76b215af14b87098c56c67c116e7c0e47a2d3fb6af1f3b58933e73daafbb056f9866154334a5e43cb4de0051e4a85e8da18a3f22ebeec8b438ae9778
- SSDEEP 3072:goLvxwyhtIZ+5YDaopp5+oaD1RlSCFOrFi47n8IHUyBrp+HOLCZJckG9nri13xv6:gm8A5YD/pp5+oaBRlSC8v8zyX/CI
- TLSH T1C0545D45B7E900A9F1BBAA3489B64512DA777C054770D6DF0398427E9F23BD08D39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-05_21c3a13a66f74a647034ee32b4bc3c47_cobalt-strike_icedid_njrat_satacom.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-05_21c3a13a66f74a647034ee32b4bc3c47_cobalt-strike_icedid_njrat_satacom.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-05_21c3a13a66f74a647034ee32b4bc3c47_cobalt-strike_icedid_njrat_satacom
- Size 276KB
- SHA256 8e8ae52c6bb00c321d797726ed809d3b7674132bd9b4c6e01f035f602ed8c694
- MD5 21c3a13a66f74a647034ee32b4bc3c47
- SHA1 f27c83124315bff02b98efb35395b2e34f63a5d4
- SHA512 177a667b76b215af14b87098c56c67c116e7c0e47a2d3fb6af1f3b58933e73daafbb056f9866154334a5e43cb4de0051e4a85e8da18a3f22ebeec8b438ae9778
- SSDEEP 3072:goLvxwyhtIZ+5YDaopp5+oaD1RlSCFOrFi47n8IHUyBrp+HOLCZJckG9nri13xv6:gm8A5YD/pp5+oaBRlSC8v8zyX/CI
- TLSH T1C0545D45B7E900A9F1BBAA3489B64512DA777C054770D6DF0398427E9F23BD08D39B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects DarkSideRAT
Suspicious use of SetThreadContext