Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/08/2026, 10:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_86d4b2da351d8eca611840a2c9ecc8b7_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_86d4b2da351d8eca611840a2c9ecc8b7_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-18_86d4b2da351d8eca611840a2c9ecc8b7_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-18_86d4b2da351d8eca611840a2c9ecc8b7_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-18_86d4b2da351d8eca611840a2c9ecc8b7_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 640KB
- Sample260818-l213vs1thy
- SHA256 8d11c5ff826ee72e9876cefb62e27f9ec111f27c6dc853ad15e2c2edf773406e
- MD5 86d4b2da351d8eca611840a2c9ecc8b7
- SHA1 a79dae5117f12769988ae90a5cb19dddae80fd14
- SHA512 324697c390d8d0d1a862c0349c0c45314f9c56d1cfd9108633b0bd189863f117bacbdca8d2a89c0931c9f171e44109fddedd17d5816bd57f7d629eaa09c9b50d
- SSDEEP 6144:95eKQkB4p4rWTSIoXNHnr1GJOl4uvjgddFMDmt4JZg2p7LrimEHcGuvvNFLc+D/D:DZ6irWcRGJlFMD3JeU7vinrmNyPz5L87
- TLSH T17FD42717A2981FE8D16F91788A924952E7737C264F2097CF03906E263F376D0AE39753
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10