General
- Target 2026-08-14_94262a5b0cebdc4ba910255dc7fb99bc_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 526KB
- Sample260814-ebyfqacj5t
- SHA256 45e7191d31ed177b71252e3740e027b848502ae374563b2bb7b130327163cdc8
- MD5 94262a5b0cebdc4ba910255dc7fb99bc
- SHA1 6c7515b3004fb6eb4f83f3f546121301fce49f8d
- SHA512 0810a30dfd57d7959d6a70658cd06285b93db6ee815a264b07a8ded1f8b4cc581d86316ca99ad29937353b044af1118f3aba73dc17e14f938073e155a68b1175
- SSDEEP 12288:8iYkDi5eiQ7uysMFZzN/qXKGHNfdLeFhLLHx:Mvvg4FqPt
- TLSH T1D2B4BF11F78548F9E493C17088A65A56C639FCAD0B71A9DF63C8B72A1F323E04D39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_94262a5b0cebdc4ba910255dc7fb99bc_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_94262a5b0cebdc4ba910255dc7fb99bc_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_94262a5b0cebdc4ba910255dc7fb99bc_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 526KB
- SHA256 45e7191d31ed177b71252e3740e027b848502ae374563b2bb7b130327163cdc8
- MD5 94262a5b0cebdc4ba910255dc7fb99bc
- SHA1 6c7515b3004fb6eb4f83f3f546121301fce49f8d
- SHA512 0810a30dfd57d7959d6a70658cd06285b93db6ee815a264b07a8ded1f8b4cc581d86316ca99ad29937353b044af1118f3aba73dc17e14f938073e155a68b1175
- SSDEEP 12288:8iYkDi5eiQ7uysMFZzN/qXKGHNfdLeFhLLHx:Mvvg4FqPt
- TLSH T1D2B4BF11F78548F9E493C17088A65A56C639FCAD0B71A9DF63C8B72A1F323E04D39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association