Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 01:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_e8dd6c0d4a3f038ed1690d33052d95b4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_e8dd6c0d4a3f038ed1690d33052d95b4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260618-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-27_e8dd6c0d4a3f038ed1690d33052d95b4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-27_e8dd6c0d4a3f038ed1690d33052d95b4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-27_e8dd6c0d4a3f038ed1690d33052d95b4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 2.3MB
- Sample260629-b57ppsaw4t
- SHA256 e7ffdabb957d4ad5abba555f4255f291bebf07006ae220077d6128b10d51059f
- MD5 e8dd6c0d4a3f038ed1690d33052d95b4
- SHA1 192a779fc2284700184d72de07b6b5d1f8bc7866
- SHA512 e2db5883938f97ed8ff122c64a00bc9548de371bab1570b24636d9c2af747e62b404f3f49f6f277d95a52d1d8b43dcd5ea77547958d98f88542add5efe371828
- SSDEEP 24576:B+Cq99Ly4CxzYTqMi8C4gjI45bl9Mbonwap41+zzPTThwv3EJX:B+Cq99LykqJ4gjI45TMwwapIgTn
- TLSH T1FDB5172271E200A9C18DD075CF46973597E13CA98FF193FBB145B2C92B72AD07B3961A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10