Overview

overview

10

Static

static

3

2026-03-06...ar.exe

windows10-2004-x64

10

2026-03-06...ar.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-03-06_72343f6c9d136dc7d6e9b0c680a356c6_cobalt-strike_icedid_satacom_vidar
  • Size 3.1MB
  • Sample260306-e7sv4sas31
  • SHA256 31cde950f7b0bea068e88429b4f83b143333af9002bca24778ba2e7e25bbe256
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
aurorastealer

Malware Config

Extracted

Family

  • aurora

C2

  • 138.201.198.8:8081

Targets

    • Target
      2026-03-06_72343f6c9d136dc7d6e9b0c680a356c6_cobalt-strike_icedid_satacom_vidar
    • Size 3.1MB
    • SHA256 31cde950f7b0bea068e88429b4f83b143333af9002bca24778ba2e7e25bbe256
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    aurorastealer

    • Aurora

      Aurora is a crypto wallet stealer written in Golang.

      stealeraurora

    • Aurora family

      aurora

    • Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks