General
- Target 2026-08-25_6a03dd7cd413542edb2cc0d1ed885b1b_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 3.0MB
- Sample260826-2hezaaxdpb
- SHA256 8239d5b0acb7e53b017863f46d47d9962832c2b38df9c1936b30965d92f538e2
- MD5 6a03dd7cd413542edb2cc0d1ed885b1b
- SHA1 ab0e4ca906bee85176036389bdeda7f15bce7a9d
- SHA512 9188142b4b85482f953969f859a4bc5c12e90af194f689ff749940578c44056ace3ae231f0c1c8d446514e5a82646e2c794e526f59d4051785d5a2f3fa99d771
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T1A1E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_6a03dd7cd413542edb2cc0d1ed885b1b_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_6a03dd7cd413542edb2cc0d1ed885b1b_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 3.0MB
- SHA256 8239d5b0acb7e53b017863f46d47d9962832c2b38df9c1936b30965d92f538e2
- MD5 6a03dd7cd413542edb2cc0d1ed885b1b
- SHA1 ab0e4ca906bee85176036389bdeda7f15bce7a9d
- SHA512 9188142b4b85482f953969f859a4bc5c12e90af194f689ff749940578c44056ace3ae231f0c1c8d446514e5a82646e2c794e526f59d4051785d5a2f3fa99d771
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T1A1E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE