Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
31/05/2026, 19:53
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-31_d4da7f1e3460b9f936aa2802f153dbe9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_d4da7f1e3460b9f936aa2802f153dbe9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-31_d4da7f1e3460b9f936aa2802f153dbe9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-31_d4da7f1e3460b9f936aa2802f153dbe9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-31_d4da7f1e3460b9f936aa2802f153dbe9_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
- Size 375KB
- Sample260531-ymeyasfs21
- SHA256 23d85aadd671c5411da1768729f246e5c655018c99e8b10d4dc9e19da8721f7b
- MD5 d4da7f1e3460b9f936aa2802f153dbe9
- SHA1 864043512e1e79571b3d3edb7d0ef5f193206f73
- SHA512 dafc12eb09809972e8be0a2a27210a824aa549f5f9c5a53309c17b4d8597f2d20e8c55e9a64223bbe1776071e732fb4f8e28385c5c2a7c1aabae730c9455d744
- SSDEEP 6144:N+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/ZlE8sNrwC:dYkDi5eiQ7uysMFZzN/Tm1n
- TLSH T103847B16F75408FDD897C578CA924646AA367CCE1B71EADF1798422A2F237F04E39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10