General
- Target 2026-08-14_ee3e64d1763d0d0e0e7c3434cc654cdc_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 2.9MB
- Sample260814-xd65raygqe
- SHA256 c783693fa9bb9a3a012c3afec2411ce22f5048e4c107ad495f65443d76726d13
- MD5 ee3e64d1763d0d0e0e7c3434cc654cdc
- SHA1 421bc797c947151e8eaf6628b090bbf981cb5e54
- SHA512 07e9178b03583dbde11315d7d15cb5de97d01ea515d17a379a35cbc01554466569b76b6b94d2e153cc8bb70c1aa076a1d372222ada822a6e2406dfd8c1e8eaa6
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T1C0E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_ee3e64d1763d0d0e0e7c3434cc654cdc_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_ee3e64d1763d0d0e0e7c3434cc654cdc_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 2.9MB
- SHA256 c783693fa9bb9a3a012c3afec2411ce22f5048e4c107ad495f65443d76726d13
- MD5 ee3e64d1763d0d0e0e7c3434cc654cdc
- SHA1 421bc797c947151e8eaf6628b090bbf981cb5e54
- SHA512 07e9178b03583dbde11315d7d15cb5de97d01ea515d17a379a35cbc01554466569b76b6b94d2e153cc8bb70c1aa076a1d372222ada822a6e2406dfd8c1e8eaa6
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T1C0E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE