General
- Target 2026-04-25_8a0e30dab116a9dec7baf64d4819cec9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 757KB
- Sample260425-e3cy4aft4z
- SHA256 01b1e75952c9c9c0af28fba3cbaf372af86a4faedf556efc674a0430ad0a6b3a
- MD5 8a0e30dab116a9dec7baf64d4819cec9
- SHA1 5fde8aef8caa25784983bfb98e2db45b8f667256
- SHA512 3ebd8c65e635fa1ecf6c1637aacd94266413dc276286843542f31debc3bc8da57f15e48e92c75d31854541804acea018dce1f3c9494c873ae26e8d82a8e18ec1
- SSDEEP 12288:SYyDi5eJQ7uysMFZzN/E/msxBm1Wd97pK12Db6WXQo:FavgsBrtWWXd
- TLSH T154F47D02EB8804EAD877C630C1B19656DB37B8D56BA1DBDF12983A3D3E226D09D35734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-25_8a0e30dab116a9dec7baf64d4819cec9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_8a0e30dab116a9dec7baf64d4819cec9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_8a0e30dab116a9dec7baf64d4819cec9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 757KB
- SHA256 01b1e75952c9c9c0af28fba3cbaf372af86a4faedf556efc674a0430ad0a6b3a
- MD5 8a0e30dab116a9dec7baf64d4819cec9
- SHA1 5fde8aef8caa25784983bfb98e2db45b8f667256
- SHA512 3ebd8c65e635fa1ecf6c1637aacd94266413dc276286843542f31debc3bc8da57f15e48e92c75d31854541804acea018dce1f3c9494c873ae26e8d82a8e18ec1
- SSDEEP 12288:SYyDi5eJQ7uysMFZzN/E/msxBm1Wd97pK12Db6WXQo:FavgsBrtWWXd
- TLSH T154F47D02EB8804EAD877C630C1B19656DB37B8D56BA1DBDF12983A3D3E226D09D35734
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association