Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
27/05/2026, 16:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
- Size 980KB
- Sample260527-txd2jact7p
- SHA256 d31d0ffc1885c273c03a3ac3c848d1552dcf8b61d150f565331deec66dec382b
- MD5 27a50f4fbd6d5364774164b3fe0599f3
- SHA1 3a39de39eb7c7735c27454271870609e3b6ee984
- SHA512 27a170fdc572d5a09c6b6712c1de571239cde724ff6f29fe8027a899b838b1cc3a0d8623b9bd99c2dd37382e4dbfd8aec13ce4039eb753b9b1bdea19c0e45eff
- SSDEEP 12288:FMojmaR7V9q5c5TMnMMjPGLfOIvJPvd0L6vV3gsi7PY5Uoael5+nSn/SHWZ:FMoT7a52TMM8GLphN0+vBtmY+JH
- TLSH T167259E1BF69400ECD069C534CB668232DA72B8970B35AAEF06D4D2591E7BAF45F3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-27_27a50f4fbd6d5364774164b3fe0599f3_akira_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"1⤵PID:1992