General
- Target 2026-10-23_10024b470ebd094a071c09b56b62189f_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 3.1MB
- Sample261023-sh76dsdb42
- SHA256 fc37109826a34a9814c4e0bc2adfe787439ef6274727f665494137625d55a862
- MD5 10024b470ebd094a071c09b56b62189f
- SHA1 f889e901c5c7158e0982e14ba083f1a7537c4729
- SHA512 adc36fb386e055ec83ad01190e6b4770b55413b7497d1a21150ccede67b63eb5002539ac7f3ad0c7e5fe74032ce0937027156703688046df9b13f783dea89b50
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T1E5E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-23_10024b470ebd094a071c09b56b62189f_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_10024b470ebd094a071c09b56b62189f_cobalt-strike_cryptbot_icedid_njrat_satacom_vidar
- Size 3.1MB
- SHA256 fc37109826a34a9814c4e0bc2adfe787439ef6274727f665494137625d55a862
- MD5 10024b470ebd094a071c09b56b62189f
- SHA1 f889e901c5c7158e0982e14ba083f1a7537c4729
- SHA512 adc36fb386e055ec83ad01190e6b4770b55413b7497d1a21150ccede67b63eb5002539ac7f3ad0c7e5fe74032ce0937027156703688046df9b13f783dea89b50
- SSDEEP 49152:kDjlabwz9EetuYs9o9H+LtfhKDezZyIP66TR+3Ql/GA/6kVtbP/imqGM8:0qwZmogLRhK+ZlPJXlVd6m3M
- TLSH T1E5E51209E3E905F8E4B7EA78C9660907F7793C4943218B8F13E5556A2F57390DE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
XMRig Miner payload
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE