General
- Target 2026-08-17_ae85bb1eb72afa2262f451d7af6e70d6_amadey_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 596KB
- Sample260817-jmsrtsfr4y
- SHA256 b7f2203b6a76ac1c20d6647db5a1311eb59b578ed024658eb8091fc47bd5a963
- MD5 ae85bb1eb72afa2262f451d7af6e70d6
- SHA1 14db2d25a3d83452540f4cfbcd0f52c36ff1e928
- SHA512 278931cfe17bd1ff209b191f549a431ad5016a68fdfcee40adf4a5a202d64a422f54aa913df77214f398245e98b9e547b923b37f683f19d968933db7d22acf99
- SSDEEP 12288:pYyDi5rNiQ7HysMFZzN/E/msQlsytbO9ipWLu0I3eB+gRMhIW:6yugpR+iEoeB1qhR
- TLSH T111D43B12F7F409BDF4F39A3089714A26D93ABC669F31EAAF1684115D1E31A908D35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-17_ae85bb1eb72afa2262f451d7af6e70d6_amadey_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_ae85bb1eb72afa2262f451d7af6e70d6_amadey_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_ae85bb1eb72afa2262f451d7af6e70d6_amadey_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 596KB
- SHA256 b7f2203b6a76ac1c20d6647db5a1311eb59b578ed024658eb8091fc47bd5a963
- MD5 ae85bb1eb72afa2262f451d7af6e70d6
- SHA1 14db2d25a3d83452540f4cfbcd0f52c36ff1e928
- SHA512 278931cfe17bd1ff209b191f549a431ad5016a68fdfcee40adf4a5a202d64a422f54aa913df77214f398245e98b9e547b923b37f683f19d968933db7d22acf99
- SSDEEP 12288:pYyDi5rNiQ7HysMFZzN/E/msQlsytbO9ipWLu0I3eB+gRMhIW:6yugpR+iEoeB1qhR
- TLSH T111D43B12F7F409BDF4F39A3089714A26D93ABC669F31EAAF1684115D1E31A908D35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association