Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 10:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_bc9c045ea5a958f020771b3dc7099f64_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_bc9c045ea5a958f020771b3dc7099f64_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Resource
win11-20260130-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-11_bc9c045ea5a958f020771b3dc7099f64_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-11_bc9c045ea5a958f020771b3dc7099f64_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-11_bc9c045ea5a958f020771b3dc7099f64_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
- Size 2.9MB
- Sample260511-mvtwmsfx9v
- SHA256 3e5c549cc6dd3fa4d7a92042cb81c2ade2c8f6bdd5f88fa8b1a0546fdeeff542
- MD5 bc9c045ea5a958f020771b3dc7099f64
- SHA1 884285b124fbcfb74849ab298d9361b5af7d35e8
- SHA512 c370faae98dabc978f856aa3c725c07db8b4485aaa2af3016800acd79e2e35482d1e6104f82fe170f92f1d2385dae96ea96996c1e324a88ad0e88aa28d087939
- SSDEEP 12288:3KkhgjI45iKl98Pbw7nw/mMuhylcsd4a4p4++F+zzNXvDFT7cOO2kDpvoSer5+n9:NgjI45bl9Mbonwap41+zzPTThwv3EJ8
- TLSH T19EE5B23271E2049AC68D9072DF46963597D13CBD8FF193F7B14572C92B729D03A3AA0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10