Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
22/05/2026, 16:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
- Size 1008KB
- Sample260522-t3c2esh19k
- SHA256 d5332ebaf0426d16969a411fa856a6c587b9ae904706238582b7fe6b7f67f4da
- MD5 9be812b4c1bdda601ea7fc4015f58dc7
- SHA1 9dd7041135e8d57626180163d297c1bb3768c6fc
- SHA512 2d1db2f52b6e34fb8758d47b71a4feae3f13586c87773f4e976bbd776842e51e628f2a0e012b89591d86b09bb74bc351dff70beb3ef119c0bf3701e1ac68aa99
- SSDEEP 12288:esvARXEs3bfvkIIka7gmSZp3LOVVO1wwlhd9PAW8B0cS5kSoY0whxel5+nnlBe:esvAr3jk/kacZp3AVO1Fd9oW8G5kSte
- TLSH T105258D1BF69500ECD069C474CB668132DA72B8570B34AAEF06D1D2592E7BAF46F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-22_9be812b4c1bdda601ea7fc4015f58dc7_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"1⤵PID:3724