Analysis
- platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 13:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0092f294db55661443dcf3b8c500d0f9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0092f294db55661443dcf3b8c500d0f9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
wait online: exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"Error 66 : Decompression error : ERROR_decompressionFailed \\nqemu-system-x86_64: error while loading state section id 1(ram)\\nqemu-system-x86_64: load of migration failed: Input/output error\\n\",\"error\":\"exit status 1\",\"time\":\"2026-07-20T13:27:28Z\",\"message\":\"Process unexpectedly exited\"}\n{\"level\":\"fatal\",\"name\":\"instance_0\",\"error\":\"Failed to query machine status: write unix @->/var/lib/sandbox/hatchvm/win11ltsc2024-20260709-en/instance_0.qmp: use of closed network connection\",\"time\":\"2026-07-20T13:27:28Z\",\"message\":\"Could not launch dirty instance\"}"
General
- Target 2026-07-20_0092f294db55661443dcf3b8c500d0f9_cobalt-strike_icedid_njrat_satacom_vidar.exe
- Size 1.2MB
- Sample260720-qqa5hsdy5s
- SHA256 9ca7a202377808e255cc1494b5fc76da7c14464cf8b725605132cc97cbf951a8
- MD5 0092f294db55661443dcf3b8c500d0f9
- SHA1 206362adb31ccd6f591fa10b7268a476f9b9f557
- SHA512 936277cc493b2b714cfbb3f1654cc631dbecca2d42a02187721c141e5f94ec02f2ea35e41040b7cfbb1a1deeb3add418d6e0118ec11aa6230b36a2f1c4453035
- SSDEEP 24576:0b5kSYaLTVly5EhWMzL9C6R5mXKemAufCzon4W9a0gCDRFPfq7:0b5k2L5M2hVdC6R5sKC2d40gCC
- TLSH T12F45129AB6950DF5E473C13988A25602F5727C120B34DAEF03A48767EF23AD06D3B751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10