darksiderat | 956d7e245922e7908d5e3c3828920e81eab8e0738a19db2f9a49d2c9e8f276d5

General

Target
2026-11-10_37b8ab07e305d0dc5cab93d120bbb09d_icedid_luca-stealer_njrat_stealc
Size 1.1MB
Sample261110-khs3gaeb27
SHA256 956d7e245922e7908d5e3c3828920e81eab8e0738a19db2f9a49d2c9e8f276d5
MD5 37b8ab07e305d0dc5cab93d120bbb09d
SHA1 33a5f07a22784532d4060de720c9490ea20f80ed
SHA512 144d4fe199f631c8c45fa84a7070677f954c5b33e25483c7091d80a40265eafd243fee12d5ab7aa33e85241540dee1c373b72e044a9f9dcf04d6f3ed54869789
SSDEEP 12288:JDSBJCCLUvRXrmfUXwuaJqQ2pgmtEIgdLRhdxztzHJOjQueYcEQK3AzgokbZbw7m:JDOHLemsTIqTgCEIALNJej6DEQK3/
TLSH
T19235AF26A78402FCE0B6D5F9CE668852E772744B03A15ADF0BD08A625F735E45F39323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-11-10_37b8ab07e305d0dc5cab93d120bbb09d_icedid_luca-stealer_njrat_stealc
- Size 1.1MB
- SHA256 956d7e245922e7908d5e3c3828920e81eab8e0738a19db2f9a49d2c9e8f276d5
- MD5 37b8ab07e305d0dc5cab93d120bbb09d
- SHA1 33a5f07a22784532d4060de720c9490ea20f80ed
- SHA512 144d4fe199f631c8c45fa84a7070677f954c5b33e25483c7091d80a40265eafd243fee12d5ab7aa33e85241540dee1c373b72e044a9f9dcf04d6f3ed54869789
- SSDEEP 12288:JDSBJCCLUvRXrmfUXwuaJqQ2pgmtEIgdLRhdxztzHJOjQueYcEQK3AzgokbZbw7m:JDOHLemsTIqTgCEIALNJej6DEQK3/
- TLSH
  T19235AF26A78402FCE0B6D5F9CE668852E772744B03A15ADF0BD08A625F735E45F39323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery darksiderat trojan
- Detects DarkSideRAT
- Family: DarkSideRAT
  DarkSideRAT is a remote access trojan.
  trojan darksiderat
- Downloads MZ/PE file
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

2

T1082

System Network Configuration Discovery

1

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects DarkSideRAT

Family: DarkSideRAT

Downloads MZ/PE file

Executes dropped EXE

Checks whether UAC is enabled

Network Share Discovery

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2