General
- Target 2026-08-22_966735457bed6d046ed970585d220581_cobalt-strike_coinminer_icedid_njrat_remcos_vidar
- Size 626KB
- Sample260823-e5ssbssfqc
- SHA256 934345ec3f1f512eb1d37c01c891d0d0f1daff92dbaa339cfd1fcd9479885a86
- MD5 966735457bed6d046ed970585d220581
- SHA1 f3caaee6cf7bb13d4e11470913941c985124b3cc
- SHA512 d4a93ce0c0e7774c7feed54822e7e779984876daf0a5e06d5be901b1eab24eb8e8bb80aa354ca1cb937354776f2d5dc79cc4a08c17904c5fe4bd98d8671f6038
- SSDEEP 12288:qZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:UQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T1D4D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-22_966735457bed6d046ed970585d220581_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_966735457bed6d046ed970585d220581_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.2.6 Pro
Botnet
-
RemoteHost
C2
-
46.151.182.30:8230
Attributes
-
audio_folder
MicRecords
-
audio_path
ApplicationPath
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-XA9A2E
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 2026-08-22_966735457bed6d046ed970585d220581_cobalt-strike_coinminer_icedid_njrat_remcos_vidar
- Size 626KB
- SHA256 934345ec3f1f512eb1d37c01c891d0d0f1daff92dbaa339cfd1fcd9479885a86
- MD5 966735457bed6d046ed970585d220581
- SHA1 f3caaee6cf7bb13d4e11470913941c985124b3cc
- SHA512 d4a93ce0c0e7774c7feed54822e7e779984876daf0a5e06d5be901b1eab24eb8e8bb80aa354ca1cb937354776f2d5dc79cc4a08c17904c5fe4bd98d8671f6038
- SSDEEP 12288:qZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5Zr:UQKjlZQuaVWoqVpqsuJt6YcJYY05
- TLSH T1D4D47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10