General
- Target 2026-07-10_77c17686b9212e5b1a9d96d565f3ec20_cobalt-strike_hijackloader_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 425KB
- Sample260710-wcetfady7j
- SHA256 a36cc7a9a7a01945ba6046fbafb0dfe4715d9e5ecb7784d9ea873b73c95faf35
- MD5 77c17686b9212e5b1a9d96d565f3ec20
- SHA1 752016dadf5c7bb59f100b13134bf1fa5e877b0b
- SHA512 a49abb03fae1a52e6519dd23c5303ce059e62e9ed312cfdb6bbfd64adf55dc562cdcf4fe9b286e3bda3118998160677f25d71a6f732421544bd9f755c1019b2d
- SSDEEP 6144:p+2Ynw0zeWiDi5eJwQ8kV3f+RysMFZzN/0JK2PVtk8sNrwFx7k/Nn:5YUDi5eiQ7uysMFZzN/0JK2LG1/1n
- TLSH T1C4949D02F74408F9D497C1B4C99355569A39BC9E0BB1AAEF1BC8432A2F327F04E39B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-10_77c17686b9212e5b1a9d96d565f3ec20_cobalt-strike_hijackloader_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_77c17686b9212e5b1a9d96d565f3ec20_cobalt-strike_hijackloader_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_77c17686b9212e5b1a9d96d565f3ec20_cobalt-strike_hijackloader_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 425KB
- SHA256 a36cc7a9a7a01945ba6046fbafb0dfe4715d9e5ecb7784d9ea873b73c95faf35
- MD5 77c17686b9212e5b1a9d96d565f3ec20
- SHA1 752016dadf5c7bb59f100b13134bf1fa5e877b0b
- SHA512 a49abb03fae1a52e6519dd23c5303ce059e62e9ed312cfdb6bbfd64adf55dc562cdcf4fe9b286e3bda3118998160677f25d71a6f732421544bd9f755c1019b2d
- SSDEEP 6144:p+2Ynw0zeWiDi5eJwQ8kV3f+RysMFZzN/0JK2PVtk8sNrwFx7k/Nn:5YUDi5eiQ7uysMFZzN/0JK2LG1/1n
- TLSH T1C4949D02F74408F9D497C1B4C99355569A39BC9E0BB1AAEF1BC8432A2F327F04E39B55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association