Overview

overview

10

Static

static

3

2026-08-01...ar.exe

windows10-2004-x64

10

2026-08-01...ar.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2026-08-01_140108bf78ab554f9fbc874eab22c090_cobalt-strike_icedid_njrat_remcos_satacom_vidar
  • Size 13.7MB
  • Sample260802-bnst8abk8w
  • SHA256 b99ca4c009473c8b8ef4f285a31551d59098180d2c18783bd1097705831a1576
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
rokratrat

Malware Config

Targets

    • Target
      2026-08-01_140108bf78ab554f9fbc874eab22c090_cobalt-strike_icedid_njrat_remcos_satacom_vidar
    • Size 13.7MB
    • SHA256 b99ca4c009473c8b8ef4f285a31551d59098180d2c18783bd1097705831a1576
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    rokratrat

    • Detect Rokrat payload

    • Family: Rokrat

      Rokrat is a remote access trojan written in c++.

      ratrokrat

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks