General
- Target 2026-08-19_b994ad6c1e6c34c5eefb82bb684d629c_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260819-wdjh1seq2z
- SHA256 663f3162fd8ae6a7f3a4410383a25b3f2b8904dea50c2e6cf5baa6d2b6772e8d
- MD5 b994ad6c1e6c34c5eefb82bb684d629c
- SHA1 7766c41a74fe16b2007537c06111fe95b25c0951
- SHA512 581bba343ecadd678ebdff28cc950e55df3845e5d80283cd89107994abfca2162de0f70929c17d5da023601f670a8a4da67e51e47823532724e352be9f4c48ef
- SSDEEP 6144:3+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/0JK2P61ctq8sNrw7:3YkDi5eiQ7uysMFZzN/0JK2C4o1e
- TLSH T136849C06F74408F9D897C2B4C9964656DA39BC9E0B71AEDF17C8472A2F227F04E39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_b994ad6c1e6c34c5eefb82bb684d629c_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_b994ad6c1e6c34c5eefb82bb684d629c_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b994ad6c1e6c34c5eefb82bb684d629c_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 663f3162fd8ae6a7f3a4410383a25b3f2b8904dea50c2e6cf5baa6d2b6772e8d
- MD5 b994ad6c1e6c34c5eefb82bb684d629c
- SHA1 7766c41a74fe16b2007537c06111fe95b25c0951
- SHA512 581bba343ecadd678ebdff28cc950e55df3845e5d80283cd89107994abfca2162de0f70929c17d5da023601f670a8a4da67e51e47823532724e352be9f4c48ef
- SSDEEP 6144:3+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/0JK2P61ctq8sNrw7:3YkDi5eiQ7uysMFZzN/0JK2C4o1e
- TLSH T136849C06F74408F9D897C2B4C9964656DA39BC9E0B71AEDF17C8472A2F227F04E39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association