General
- Target 2026-09-30_b5f4f042b49a85293210399695475702_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 3.1MB
- Sample261001-jbvr2sdg98
- SHA256 b53c8c5ac16898da9e97d2dc8552276e9f728ba023acb18b3915e8b7e4e8d5e4
- MD5 b5f4f042b49a85293210399695475702
- SHA1 9c59ec786b49dfa0f151f7ee8a7a337909ef27fe
- SHA512 97949ddc90c60f90db4a27f05d7fc1721543c31a24108d90dc2841ef0a656cc0f1abfa737c8c600abfd9783f6a96844ec0ce2ce67bd27eff6e4f8b9180cfc56d
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T171E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_b5f4f042b49a85293210399695475702_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_b5f4f042b49a85293210399695475702_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 3.1MB
- SHA256 b53c8c5ac16898da9e97d2dc8552276e9f728ba023acb18b3915e8b7e4e8d5e4
- MD5 b5f4f042b49a85293210399695475702
- SHA1 9c59ec786b49dfa0f151f7ee8a7a337909ef27fe
- SHA512 97949ddc90c60f90db4a27f05d7fc1721543c31a24108d90dc2841ef0a656cc0f1abfa737c8c600abfd9783f6a96844ec0ce2ce67bd27eff6e4f8b9180cfc56d
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T171E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE