General
- Target 2026-04-16_0a7b00a4d0866c8666d0a3c88c66b007_cobalt-strike_hawkeye_icedid_remcos_satacom_vidar_wannacry
- Size 1.7MB
- Sample260416-gseq2sbt31
- SHA256 991ecd4d1387ef0143e02e1c310d3d55cafa707856f0440fa1256c511a7c8d92
- MD5 0a7b00a4d0866c8666d0a3c88c66b007
- SHA1 a11f901a534d9a6c457ba3cf454ab9a439e64342
- SHA512 f7fc8c770bc5627d8cbef9c3b86693ee96ae7a137a5e55b52afc50708527ecda197cd5755e8c375397e36028c23d97d86d3b72f8fd29527ec50ba721b2b8719c
- SSDEEP 24576:/jr9jjjrWb2jjjr9jjjrWbO49H67pbQAhY5b:YBO4p67pbQH
- TLSH T118854C01A7E450B9E1764A308972851D9B72BC52CA739F8F23906DDEBFF16809E35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_0a7b00a4d0866c8666d0a3c88c66b007_cobalt-strike_hawkeye_icedid_remcos_satacom_vidar_wannacry.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_0a7b00a4d0866c8666d0a3c88c66b007_cobalt-strike_hawkeye_icedid_remcos_satacom_vidar_wannacry.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_0a7b00a4d0866c8666d0a3c88c66b007_cobalt-strike_hawkeye_icedid_remcos_satacom_vidar_wannacry
- Size 1.7MB
- SHA256 991ecd4d1387ef0143e02e1c310d3d55cafa707856f0440fa1256c511a7c8d92
- MD5 0a7b00a4d0866c8666d0a3c88c66b007
- SHA1 a11f901a534d9a6c457ba3cf454ab9a439e64342
- SHA512 f7fc8c770bc5627d8cbef9c3b86693ee96ae7a137a5e55b52afc50708527ecda197cd5755e8c375397e36028c23d97d86d3b72f8fd29527ec50ba721b2b8719c
- SSDEEP 24576:/jr9jjjrWb2jjjr9jjjrWbO49H67pbQAhY5b:YBO4p67pbQH
- TLSH T118854C01A7E450B9E1764A308972851D9B72BC52CA739F8F23906DDEBFF16809E35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.