General
- Target 2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260805-x28ngseq4t
- SHA256 b5a6d790d1a89b5e9dbf73b91220c9ea25e4a4a78de3c02d2b57ae8a40e85c30
- MD5 065a17e5462b8b590187b89a0b5c98f8
- SHA1 d41deefa34cc014572fd3dcbb1ddb73dc3a17634
- SHA512 b573fedf387eaf524d5926a73ce87452f3a0e2788b188efc052ae9e6228c3e3fa928b79c78b06d4584e84b0e12da2d3ad722fdd7a897a7c8cb110142ad4a6b9a
- SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/griEfsNrwT:pYyDi5eNiQ7uysMFZzN/gGL1a
- TLSH T1E6847C16FB9508FDE5A7C5748A9245469A357C9F0B71EADF07C8422A2F237F08E39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_065a17e5462b8b590187b89a0b5c98f8_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 b5a6d790d1a89b5e9dbf73b91220c9ea25e4a4a78de3c02d2b57ae8a40e85c30
- MD5 065a17e5462b8b590187b89a0b5c98f8
- SHA1 d41deefa34cc014572fd3dcbb1ddb73dc3a17634
- SHA512 b573fedf387eaf524d5926a73ce87452f3a0e2788b188efc052ae9e6228c3e3fa928b79c78b06d4584e84b0e12da2d3ad722fdd7a897a7c8cb110142ad4a6b9a
- SSDEEP 6144:p+GYnA0zeWsDi5eJziQ8kV3f+RysMFZzN/griEfsNrwT:pYyDi5eNiQ7uysMFZzN/gGL1a
- TLSH T1E6847C16FB9508FDE5A7C5748A9245469A357C9F0B71EADF07C8422A2F237F08E39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association