General
- Target 2026-07-01_4c07c188565d151eefbc3f98163fcf31_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 2.5MB
- Sample260701-vqpp5aaz7n
- SHA256 4118155cb34823c36a09e0e520b6f67d6f6e8594a34a32ebe5e2f2ca95a43314
- MD5 4c07c188565d151eefbc3f98163fcf31
- SHA1 a88a1e4b78fb046d3e4d9b9b476c2ad387251b34
- SHA512 02eb4a75b14f2401c7160cb8e6656bacae544d2607bcedad4c2346cbd65375d0906b0352f9259c79faa2fd19a14c41fa00979e102681297307d14d06a345eb2e
- SSDEEP 49152:kDjlabwz9ku7M3Yzs+Fhl3INPHfdBcZiyuNFBAkpVOZoBvXIhRagkPrCyPy9:0qwuu7vg+PONHdBcMyuNFBAkHOZhRaHA
- TLSH T114C5121AF3E408F8E1B7E638C9574912F77A3C4907719A8F13A9126A1F67390DE3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_4c07c188565d151eefbc3f98163fcf31_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_4c07c188565d151eefbc3f98163fcf31_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 2.5MB
- SHA256 4118155cb34823c36a09e0e520b6f67d6f6e8594a34a32ebe5e2f2ca95a43314
- MD5 4c07c188565d151eefbc3f98163fcf31
- SHA1 a88a1e4b78fb046d3e4d9b9b476c2ad387251b34
- SHA512 02eb4a75b14f2401c7160cb8e6656bacae544d2607bcedad4c2346cbd65375d0906b0352f9259c79faa2fd19a14c41fa00979e102681297307d14d06a345eb2e
- SSDEEP 49152:kDjlabwz9ku7M3Yzs+Fhl3INPHfdBcZiyuNFBAkpVOZoBvXIhRagkPrCyPy9:0qwuu7vg+PONHdBcMyuNFBAkHOZhRaHA
- TLSH T114C5121AF3E408F8E1B7E638C9574912F77A3C4907719A8F13A9126A1F67390DE3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE