Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 22:09
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_e0be8f72b1cf708ddec592eed9bc6006_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_e0be8f72b1cf708ddec592eed9bc6006_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-04_e0be8f72b1cf708ddec592eed9bc6006_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-04_e0be8f72b1cf708ddec592eed9bc6006_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-04_e0be8f72b1cf708ddec592eed9bc6006_cobalt-strike_glassworm_icedid_ryuk_satacom_stealc_vidar_xworm.exe
- Size 375KB
- Sample260804-12sh2s1fmc
- SHA256 db5f0f6702251d249fc7d77177617b23cc442940fa5f1e4c28f71399563af785
- MD5 e0be8f72b1cf708ddec592eed9bc6006
- SHA1 d6b8f5f6865045f5927734898057e85311bbcd05
- SHA512 8a0882e4442af8d1e0151679799076a2902a981a80493e3d97896f17ef52e918642af8cdb506e1a663e84fbaabd89236334aaf381ed80a56420bb0b8304a3070
- SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/z/msHOtb3Q63fsNrw:pYyDi5eNiQ7uysMFZzN/z/msuLE1
- TLSH T17A848C16F75408FDD4ABC57489A24546DA397C9E0B72EADF17C8422A2F237F08E39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10