General
- Target 2026-07-31_fefe401fae9f18f258b3b2ecbe9f237f_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 376KB
- Sample260731-tf1tzaxvb1
- SHA256 1e307b6ac5c2c37743899d5368d51bf30fb798a66b25f01e2324311cc0bd6b64
- MD5 fefe401fae9f18f258b3b2ecbe9f237f
- SHA1 02c243d59c1454aefb88268da98e076ed57ee502
- SHA512 86b8b91b542db80ca02dd3d3d820c1167ea2e544cf4f9be54cffba0f360d1aeafa2e9953967c295193821dd72a5ff233030ab3851acf7e3bf8c53b9af5a6e5f2
- SSDEEP 6144:3+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/0JK2P71ctK8sNrw:3YkDi5eiQ7uysMFZzN/0JK2z4I1
- TLSH T1F7848C06F74408F9D493C2B4C9964696DA39BC9E0B71AEDF17D8462A2F327F04E39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_fefe401fae9f18f258b3b2ecbe9f237f_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_fefe401fae9f18f258b3b2ecbe9f237f_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_fefe401fae9f18f258b3b2ecbe9f237f_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 376KB
- SHA256 1e307b6ac5c2c37743899d5368d51bf30fb798a66b25f01e2324311cc0bd6b64
- MD5 fefe401fae9f18f258b3b2ecbe9f237f
- SHA1 02c243d59c1454aefb88268da98e076ed57ee502
- SHA512 86b8b91b542db80ca02dd3d3d820c1167ea2e544cf4f9be54cffba0f360d1aeafa2e9953967c295193821dd72a5ff233030ab3851acf7e3bf8c53b9af5a6e5f2
- SSDEEP 6144:3+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/0JK2P71ctK8sNrw:3YkDi5eiQ7uysMFZzN/0JK2z4I1
- TLSH T1F7848C06F74408F9D493C2B4C9964696DA39BC9E0B71AEDF17D8462A2F327F04E39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE