Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/07/2026, 14:29
Behavioral task
behavioral1
Sample
2026-07-27_864f8651d01435929f195da09b14bf59_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_864f8651d01435929f195da09b14bf59_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
General
- Target 2026-07-27_864f8651d01435929f195da09b14bf59_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
- Size 626KB
- Sample260727-rtpmravwaw
- SHA256 6d5a61cf3fb8f9478d58e66c163ec2550f70664e6c395412ff2d2ef3edc4bfc6
- MD5 864f8651d01435929f195da09b14bf59
- SHA1 f73e897f643a420858da26e8818efc812fd49c97
- SHA512 6b64eaad03399de0541ff654d5c583ba851ce6733c84c9bbe906f1fac8f85bf20f87736d40ce56d34cbe07f1b3ff066af78de51e064b5e69bcf56642fe623814
- SSDEEP 12288:KZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:0QKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T1BBD47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5712 2026-07-27_864f8651d01435929f195da09b14bf59_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-27_864f8651d01435929f195da09b14bf59_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-27_864f8651d01435929f195da09b14bf59_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe"1⤵
- Suspicious use of SetWindowsHookEx
PID:5712
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\remcos\logs.dat
- Size 144B
- SHA256 d9fb6ac0f2184c0e823724fdf0ed9c7b781e90f1e19b04a8348c7e3c2c38563f
- MD5 859d0e1dc37af5fa0eb238595d29daf7
- SHA1 724d3ac201efb894d63b6dfec0c1c42f38975680
- SHA512 6bf4e1a58204a331db3bbf357937566433a7319e1878294223bb157c3fe34a4f8c7103f406ef335fd937d45e11e6edfabad2a5cc065062e55043ccdeb730ef3e
- TLSH T1E2C04C6A2BD114297976E256547600356A61F9554538880D11D6038C15F150025807D7
- MD5 SHA1 SHA512 TLSH