General
- Target 2026-07-20_0b231bc9202bf76c9841e3736f4014ed_cobalt-strike_icedid_njrat_remcos_satacom_stealc_vidar
- Size 13.8MB
- Sample260720-ml89zaez5m
- SHA256 670c1a1422f5f094fdc86431536ed015e845d49112a2813b5badf548d227d55c
- MD5 0b231bc9202bf76c9841e3736f4014ed
- SHA1 93fb1f2229724ad5e9f054e07f3447c255520e6a
- SHA512 52de5f3f4900ecc86079b6e572ece138944b0edc82891fc842661c0aec28eb898be9e71d73a64eb6c906ae4fb878f7fd353f500a0d01c5d3543535f80bea66b4
- SSDEEP 98304:NpXqxrD22l1KGBze2GAEXXKQJ+DJ6UB2TrJiH2yDp+rsxgx5wBAUZLJFXnLtO:XXqxXX7KGBze2TEABYwdGwVzXLM
- TLSH T1C4E68D4E72F580D5D5B6C03886228607E6B17C4503B4C7EB35A4B66E2F33BE16D7A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0b231bc9202bf76c9841e3736f4014ed_cobalt-strike_icedid_njrat_remcos_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0b231bc9202bf76c9841e3736f4014ed_cobalt-strike_icedid_njrat_remcos_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0b231bc9202bf76c9841e3736f4014ed_cobalt-strike_icedid_njrat_remcos_satacom_stealc_vidar
- Size 13.8MB
- SHA256 670c1a1422f5f094fdc86431536ed015e845d49112a2813b5badf548d227d55c
- MD5 0b231bc9202bf76c9841e3736f4014ed
- SHA1 93fb1f2229724ad5e9f054e07f3447c255520e6a
- SHA512 52de5f3f4900ecc86079b6e572ece138944b0edc82891fc842661c0aec28eb898be9e71d73a64eb6c906ae4fb878f7fd353f500a0d01c5d3543535f80bea66b4
- SSDEEP 98304:NpXqxrD22l1KGBze2GAEXXKQJ+DJ6UB2TrJiH2yDp+rsxgx5wBAUZLJFXnLtO:XXqxXX7KGBze2TEABYwdGwVzXLM
- TLSH T1C4E68D4E72F580D5D5B6C03886228607E6B17C4503B4C7EB35A4B66E2F33BE16D7A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.