General
- Target 2026-10-01_c3d7ce8e73853ca44b302b47a4aa4a49_cobalt-strike_coinminer_icedid_njrat_remcos_vidar
- Size 691KB
- Sample261002-d3e8sat1bx
- SHA256 d8a0e7c3b058a60067dfe66372e7037de1a2c7cc8f56ca495d984e11dd808ef4
- MD5 c3d7ce8e73853ca44b302b47a4aa4a49
- SHA1 2afc65be0a566745d669c8ff1cc1813ab1ad5619
- SHA512 d2a2d31f85f8c67c83b08225cd01a1e3abdaa9fdb56536461b66865fd32e9d027a631e2b432d835b6477cc4df87e3855086535c87b2938e12390fb609edd2a54
- SSDEEP 12288:ZIfxS5XkH4nOqwitNfuquCwgs69gy3V5v+BNyo3Xomn/u5CM/:+5GXkH4nnwitNfuq9wgs3y3V5vgNyo3
- TLSH T17DE47D99E3D402B4D07BC235C982952BE6B67C059671472F03E71E9A3F233B1673AB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-01_c3d7ce8e73853ca44b302b47a4aa4a49_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_c3d7ce8e73853ca44b302b47a4aa4a49_cobalt-strike_coinminer_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
remcos
Version
-
7.3.1 Pro
Botnet
-
BROCCOLI
C2
-
154.12.117.217:2404
Attributes
-
audio_folder
MicRecords
-
audio_path
ApplicationPath
-
audio_record_time
5
-
connect_delay
0
-
connect_interval
1
-
copy_file
remcos.exe
-
copy_folder
Remcos
-
delete_file
false
-
hide_file
false
-
hide_keylog_file
false
-
install_flag
false
-
keylog_crypt
false
-
keylog_file
logs.dat
-
keylog_flag
false
-
keylog_folder
remcos
-
mouse_option
false
-
mutex
Rmc-IFCISB
-
screenshot_crypt
false
-
screenshot_flag
false
-
screenshot_folder
Screenshots
-
screenshot_path
%AppData%
-
screenshot_time
10
-
take_screenshot_option
false
-
take_screenshot_time
5
Targets
-
- Target 2026-10-01_c3d7ce8e73853ca44b302b47a4aa4a49_cobalt-strike_coinminer_icedid_njrat_remcos_vidar
- Size 691KB
- SHA256 d8a0e7c3b058a60067dfe66372e7037de1a2c7cc8f56ca495d984e11dd808ef4
- MD5 c3d7ce8e73853ca44b302b47a4aa4a49
- SHA1 2afc65be0a566745d669c8ff1cc1813ab1ad5619
- SHA512 d2a2d31f85f8c67c83b08225cd01a1e3abdaa9fdb56536461b66865fd32e9d027a631e2b432d835b6477cc4df87e3855086535c87b2938e12390fb609edd2a54
- SSDEEP 12288:ZIfxS5XkH4nOqwitNfuquCwgs69gy3V5v+BNyo3Xomn/u5CM/:+5GXkH4nnwitNfuq9wgs3y3V5vgNyo3
- TLSH T17DE47D99E3D402B4D07BC235C982952BE6B67C059671472F03E71E9A3F233B1673AB16
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10