Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/07/2026, 15:51
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-05_cf7c8aff48b63b2aff21b724427e1728_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_cf7c8aff48b63b2aff21b724427e1728_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-07-05_cf7c8aff48b63b2aff21b724427e1728_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-05_cf7c8aff48b63b2aff21b724427e1728_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-07-05_cf7c8aff48b63b2aff21b724427e1728_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
- Size 375KB
- Sample260705-tardcadv2w
- SHA256 f32f03b4a4d22d8033a54f41594f2bbee922a86c43caf56d76a1dd1e0c5a9486
- MD5 cf7c8aff48b63b2aff21b724427e1728
- SHA1 461dabc46b769eb0b4ee95ee3e717a756f8cafe8
- SHA512 7d05b6209ff238c8e541da543c7f594737a987138b50a96a7c3a5eb49a2df163858990199e8ce7ebf688c7d251af63ccab89322c87760be62ccfe37c79fb36cb
- SSDEEP 6144:N+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/ZlE8sNrwP:dYkDi5eiQ7uysMFZzN/Tm1G
- TLSH T187846B16F75408FDD897C578CA924546AA3A7CCE1B71EADF1798422A2F237F04E39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10