General
- Target 2026-08-09_e81e1518ad04ba89365c0a5d3d2eccca_amadey_cobalt-strike_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 476KB
- Sample260809-j8qjlatepd
- SHA256 1f7e2ab2f7e42fb339682cd7b754e7e12242f5153ef31d4551d9bfc885e4296b
- MD5 e81e1518ad04ba89365c0a5d3d2eccca
- SHA1 a016fb284333edf86b8d283eb29b9b34db1d4ba4
- SHA512 d52a29c7d74ac001c477136e3fd0a84dff6e40be76d460929cce951e0b8f04388ad90fa9119b5573f635321eab003b63b55235817266ddddf1c0d3f3605122bb
- SSDEEP 12288:pYyDi5rNiQ7HysMFZzN/E/msQlsLW+B+McMeR:6yugpkW+BxclR
- TLSH T122A49F06F79008F9D5A7C53489A24556DE3A7C9B0B71EEEF17C8422A1F327E08E39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_e81e1518ad04ba89365c0a5d3d2eccca_amadey_cobalt-strike_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_e81e1518ad04ba89365c0a5d3d2eccca_amadey_cobalt-strike_icedid_remcos_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_e81e1518ad04ba89365c0a5d3d2eccca_amadey_cobalt-strike_icedid_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 476KB
- SHA256 1f7e2ab2f7e42fb339682cd7b754e7e12242f5153ef31d4551d9bfc885e4296b
- MD5 e81e1518ad04ba89365c0a5d3d2eccca
- SHA1 a016fb284333edf86b8d283eb29b9b34db1d4ba4
- SHA512 d52a29c7d74ac001c477136e3fd0a84dff6e40be76d460929cce951e0b8f04388ad90fa9119b5573f635321eab003b63b55235817266ddddf1c0d3f3605122bb
- SSDEEP 12288:pYyDi5rNiQ7HysMFZzN/E/msQlsLW+B+McMeR:6yugpkW+BxclR
- TLSH T122A49F06F79008F9D5A7C53489A24556DE3A7C9B0B71EEEF17C8422A1F327E08E39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association