Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/07/2026, 10:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_329eef8daf31b5047fb43796668e5402_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_329eef8daf31b5047fb43796668e5402_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-09_329eef8daf31b5047fb43796668e5402_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-09_329eef8daf31b5047fb43796668e5402_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-09_329eef8daf31b5047fb43796668e5402_cobalt-strike_icedid_njrat_ryuk_satacom_vidar.exe
- Size 3.6MB
- Sample260709-mzacssh15v
- SHA256 3604d38302aad3c9daf88aad6f7a66fab3beb5dd5ec8d05c2d10f9d75fbe646d
- MD5 329eef8daf31b5047fb43796668e5402
- SHA1 e25dc8e57d5fc2cb3491e22fe30d7343617726a4
- SHA512 6b166ac8d30c4ae8f4ff3b143146e782cf405adb34ca31ea308a4ba02712997d014afe64086fea285c546f3e682cf3ba28d705adc76e8b57dd6f3c439bf5b64f
- SSDEEP 49152:LufHgjI45TMwwapIgTFbXsPzpO4q7rHbBSUldP0v7f8IUhabas4f7m/:GLapI8bXsPVO4q75Av7fbUhabgE
- TLSH T1B5064A3979E100A6C565C131CF91A6A9A7A17C299FF05FDB718133CA0E37AC13E35E1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10