Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
30/05/2026, 15:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-30_cfd013364c4226c041e49702a4281df2_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_cfd013364c4226c041e49702a4281df2_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-30_cfd013364c4226c041e49702a4281df2_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-30_cfd013364c4226c041e49702a4281df2_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-30_cfd013364c4226c041e49702a4281df2_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.7MB
- Sample260530-tch5rabx2k
- SHA256 42ef6c2bff5585174c5c4e0f0548964c57641d4930cc5fb3b4b819e3ac8839e7
- MD5 cfd013364c4226c041e49702a4281df2
- SHA1 1fcd8bcc8ee6496bd8f048f5c925cf011bccf73d
- SHA512 19083bd82765145195a78294e8e11261772e017a1493085ca6ed0ae51bf500cb1b44520252af4ad0093498b489654c643f94c9af5cd3dc4423def8645ef5dfd0
- SSDEEP 24576:omzSJw6X23ttqFjSxeEY3oouRRdL+wf40m9v17YDdOJyAUw61+:omzSJw/eEY3aj5TfDm9N7GdOQZ1
- TLSH T179857B13F6D941E9D06EC174974A9132EA62BC4A0B34B6EF0790B3562E77EE06B3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10