Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 16:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_57a84f73a8d30c34ad331037b107a167_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_57a84f73a8d30c34ad331037b107a167_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-01_57a84f73a8d30c34ad331037b107a167_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-01_57a84f73a8d30c34ad331037b107a167_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-01_57a84f73a8d30c34ad331037b107a167_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 658KB
- Sample260801-vdlsps1end
- SHA256 e97fa32d1c8754423292729c0226f3cf9c245bfd4c124dd993259e1918668c07
- MD5 57a84f73a8d30c34ad331037b107a167
- SHA1 9c02ce5709ab4d9db86311a73723d2cc8636e38a
- SHA512 29100f04bdcdfa116951a9780752110e3585fd90cf25b532baa790790c8932754b97c2f8b15ebd6d3a9a54faff81338bcfdcb9479b37b05b0d01beb5cfd45b01
- SSDEEP 6144:95eKQkB4tEweoiYB2nEaKTRnXtTkCgwCzUg/HpjN4IBwu7QTLbpqmHdIv9af:DZ6K5oi4e7WRdTfgwCHKy7GLbbdIv8f
- TLSH T1CFE46C52E7E410E8F077CA3589654512DAB67C5A1B70DACF13A8561A2F33BD09E3CF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10