Analysis
- max time kernel
0s - max time network
6s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 02:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_b0822634bcfebaaebd9fc3e9ac05a805_cobalt-strike_coinminer_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_b0822634bcfebaaebd9fc3e9ac05a805_cobalt-strike_coinminer_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-08_b0822634bcfebaaebd9fc3e9ac05a805_cobalt-strike_coinminer_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-08_b0822634bcfebaaebd9fc3e9ac05a805_cobalt-strike_coinminer_glassworm_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-08_b0822634bcfebaaebd9fc3e9ac05a805_cobalt-strike_coinminer_glassworm_icedid_njrat_ryuk_satacom_vidar.exe
- Size 152.2MB
- Sample260808-demyqagm2t
- SHA256 5114dca5f10adf2928e79017bc39d4d4f219922e70b61f6a45c5edead04ee475
- MD5 b0822634bcfebaaebd9fc3e9ac05a805
- SHA1 5e18e912e79e2265b4922d14c951f932142bb73f
- SHA512 3dcc6cb9840a55eb1d3ce2d2a8976f65aa548acb9c23aaccb1bbcb770756bb56f8944d406e748ee3710377ba7e79e4c5e46d2b8c32b825165a5ffc5350c29054
- SSDEEP 1572864:wgRMg/aKxl4b7qCDQtjovZT78wLF2pArKgDz6ObiISXD+Dyj3eRalD2kGpTe/2Hv:cg/geeFXzGa9x
- TLSH T112786A03E2DA51D9F05DD1B18B979633EA72B8854728B6DF0A500B162F77EE42B3DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10