Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 13:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe
- Size 5.8MB
- Sample260717-qa9cdafx2y
- SHA256 46e48c956064ae766c7a4ec2600a5a585a6d23e06de449cf979d3566f4ab4738
- MD5 8f5a88662ce2f2e042c0f8712ef022de
- SHA1 01eb14b35c1ceeb67dfcb7d945c724e9cffb8cc0
- SHA512 7a63db144c2eaf6c4155aa785b3d5aa5fa7aea380831ad3b401ce687b292e304d8ec75b65e8282c0922e4371d71ce107e33e3ab5a11a1518280753ce9557af03
- SSDEEP 49152:mNMFZeGJkQ1BLtoYsj3cUgnDIAVx6IG1jccwgiLwKAdL+clBpDr8vsiIPhsZ4O8g:1NxoirV0tNiLwHft8vA/RY
- TLSH T1E856D41126D98FE8C44FD474CE4665B25A237C868F21AFDF0980BE293E756B46E3421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-17_8f5a88662ce2f2e042c0f8712ef022de_akira_cobalt-strike_hijackloader_icedid_njrat_remcos_satacom_stealc_vidar.exe"1⤵PID:3976