General
- Target 2026-04-15_f3a7924498ba2e9be4576e269b7dd663_cobalt-strike_satacom_stealc_vidar_wannacry
- Size 1.3MB
- Sample260415-ft2frsav8t
- SHA256 48ffa88472ca6738c102c7eb9d48a24b5681c1a148cd2d2b7e88563106009958
- MD5 f3a7924498ba2e9be4576e269b7dd663
- SHA1 647d5ce84b9f052cd75a643d8468d2eb93b0f8dd
- SHA512 c6370d1774f25a3e9606e6a65563f2e4c0951b6813ee2af4f53700debc42daef61414af74c3e3347c3ff193b07daf8538103f4d27020e579e6ca9dbb16a782d0
- SSDEEP 24576:/jI/ev6XKY0TXjjI/ev6XKY0TXVAoGAbl/ev6V:c/ev6F0To/ev6F0TFAohl/ev6V
- TLSH T1AD555B1A73A814E9E5779138C9A28605EB73BC66072193CF1394D67E1F337D0AE39B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_f3a7924498ba2e9be4576e269b7dd663_cobalt-strike_satacom_stealc_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_f3a7924498ba2e9be4576e269b7dd663_cobalt-strike_satacom_stealc_vidar_wannacry.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_f3a7924498ba2e9be4576e269b7dd663_cobalt-strike_satacom_stealc_vidar_wannacry
- Size 1.3MB
- SHA256 48ffa88472ca6738c102c7eb9d48a24b5681c1a148cd2d2b7e88563106009958
- MD5 f3a7924498ba2e9be4576e269b7dd663
- SHA1 647d5ce84b9f052cd75a643d8468d2eb93b0f8dd
- SHA512 c6370d1774f25a3e9606e6a65563f2e4c0951b6813ee2af4f53700debc42daef61414af74c3e3347c3ff193b07daf8538103f4d27020e579e6ca9dbb16a782d0
- SSDEEP 24576:/jI/ev6XKY0TXjjI/ev6XKY0TXVAoGAbl/ev6V:c/ev6F0To/ev6F0TFAohl/ev6V
- TLSH T1AD555B1A73A814E9E5779138C9A28605EB73BC66072193CF1394D67E1F337D0AE39B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.