General
- Target 2026-05-31_7f60e64e7628aa2c2ba02ec92ba93689_cobalt-strike_coinminer_icedid_njrat_remcos_vidar
- Size 630KB
- Sample260531-lwp4ead16v
- SHA256 4ff51407b5d552370022e6a6f690b636ab8f488f9740892ec83ce927cdf9eec2
- MD5 7f60e64e7628aa2c2ba02ec92ba93689
- SHA1 85dfff5677980e56f2202e9a1ad886a46d7b1c53
- SHA512 739aad633cd654a451f7b63c655995402bf4a5c0b930667cb43d34e4a8aa2dde8760e90687e6585b5b94588171310e8835c4a00adc7613ee52c83a735e65ab40
- SSDEEP 12288:zKN72uXsciTv/0+EqjCpas1aUu9dzn76qoL/oF5yGOYlYD:mN79XsciTv/0+EqGpas1xu9dzn+qoL/9
- TLSH T1EFD47D49A39402F5D07BC135CA839527E6B2BC056670866F03D74E5B6F233E19B3EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-31_7f60e64e7628aa2c2ba02ec92ba93689_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_7f60e64e7628aa2c2ba02ec92ba93689_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.5 Pro
Botnet
-
MAYO 26 MUCHACHA 2026
C2
-
servicios.piizaparquinq.info:5510
Attributes
-
audio_folder
MicRecords
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
true
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
niuytnsda
-
mouse_option
false
-
mutex
Rmc-JGHYXS
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 2026-05-31_7f60e64e7628aa2c2ba02ec92ba93689_cobalt-strike_coinminer_icedid_njrat_remcos_vidar
- Size 630KB
- SHA256 4ff51407b5d552370022e6a6f690b636ab8f488f9740892ec83ce927cdf9eec2
- MD5 7f60e64e7628aa2c2ba02ec92ba93689
- SHA1 85dfff5677980e56f2202e9a1ad886a46d7b1c53
- SHA512 739aad633cd654a451f7b63c655995402bf4a5c0b930667cb43d34e4a8aa2dde8760e90687e6585b5b94588171310e8835c4a00adc7613ee52c83a735e65ab40
- SSDEEP 12288:zKN72uXsciTv/0+EqjCpas1aUu9dzn76qoL/oF5yGOYlYD:mN79XsciTv/0+EqGpas1xu9dzn+qoL/9
- TLSH T1EFD47D49A39402F5D07BC135CA839527E6B2BC056670866F03D74E5B6F233E19B3EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10