General
- Target 2026-08-09_91fca343826f917de55b074f9419a4ac_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 2.9MB
- Sample260809-yek5cacp6s
- SHA256 d8e77666fe98bc3e8d0262469656e67a71c34cfeb4d07b15f93b027bf38ee181
- MD5 91fca343826f917de55b074f9419a4ac
- SHA1 e28d3d5e2548088dee187fc3b0c4d81a7cdde151
- SHA512 ae3dce1a0c263f23df53ccaf7af853ffb124fc121adc7fc981adc33cdcce7645e7240db570f2dd018438674e7f0a7d0f385a4024c7f58fed7cb82d6c63748b08
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T188E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_91fca343826f917de55b074f9419a4ac_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_91fca343826f917de55b074f9419a4ac_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 2.9MB
- SHA256 d8e77666fe98bc3e8d0262469656e67a71c34cfeb4d07b15f93b027bf38ee181
- MD5 91fca343826f917de55b074f9419a4ac
- SHA1 e28d3d5e2548088dee187fc3b0c4d81a7cdde151
- SHA512 ae3dce1a0c263f23df53ccaf7af853ffb124fc121adc7fc981adc33cdcce7645e7240db570f2dd018438674e7f0a7d0f385a4024c7f58fed7cb82d6c63748b08
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T188E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE