Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/08/2026, 23:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_7868b2eaed64fab579c9fb560db074b0_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_7868b2eaed64fab579c9fb560db074b0_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-18_7868b2eaed64fab579c9fb560db074b0_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-18_7868b2eaed64fab579c9fb560db074b0_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-18_7868b2eaed64fab579c9fb560db074b0_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 600KB
- Sample260818-3h44vasfrd
- SHA256 b9720c830f65859748cd7b5cf2aabf11043681654f00269aa842625db4dd6c9f
- MD5 7868b2eaed64fab579c9fb560db074b0
- SHA1 7af9731751538dcf438d431f29e8a3cceb54e0be
- SHA512 95eb12333a0ee021a9ccba884190819776a9a8ba79c3f40ec87e09a1a29d7888e51cdeecdde7446d7175124f1cd6761d541356e263b6b87098c58f176cbe6b5c
- SSDEEP 6144:95eKQk2c+D/0vxBzkiLz9unaRnPT5Dmt4JZg2p7LrimEHcGuvvNF5ERe0ME6:DZ+yPz5L8alb5D3JeU7vinrm5L0d6
- TLSH T1E8D45917A6980FE8D02F8178CA924966E7737C125F2097DF13646E263F326D06E39763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10