Analysis
- max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/05/2026, 11:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-04_a94041ed170834a05baab3357055ed20_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_a94041ed170834a05baab3357055ed20_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
Resource
win11-20260130-en
0 signatures
150 seconds
General
- Target 2026-05-04_a94041ed170834a05baab3357055ed20_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe
- Size 745KB
- Sample260504-nz36jset4p
- SHA256 ebb12e97a15ae7048b302bfdf61902bd9f087ad6776b7bf56a0eea33f55cb44a
- MD5 a94041ed170834a05baab3357055ed20
- SHA1 6f0c98b161219f5bb08b038633f152688768d259
- SHA512 4126dd862128bdda67959f4148134f21e622fec986e72dbd32c8c679582929f808366cdb30dd373e17ec8dc64c5db56c4fe1e566a4aa61fe521ac0ca4271d6bf
- SSDEEP 12288:XOv8+ZZks5JoaftpT9tB08aStHqVl4nC0/poUPdKKV6Lac/JqZma5ehcCOw9mX8P:v+ZZ/5fftpT9tB08aStKUbdKK+JqZmab
- TLSH T13EF43B3E6A6104E6C6FBC07DD156AA96FD7230640F34A7CB0691429A2F32DE55A3F331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-04_a94041ed170834a05baab3357055ed20_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-04_a94041ed170834a05baab3357055ed20_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_stealc_vidar.exe"1⤵PID:5308