General
- Target 2026-08-20_78a04309cb89f910c599c6b501ac0038_cobalt-strike_icedid_ryuk_satacom_vidar
- Size 223KB
- Sample260820-pl2agaxamf
- SHA256 5173a98e76d7d288d0d4a3790f70874997b741483cbe02062d1f5d62ddf6c05b
- MD5 78a04309cb89f910c599c6b501ac0038
- SHA1 cb195b970ef687c32b5a71cf008a08013f252dd2
- SHA512 7150b1c42a7d566804942021de16dfd27705db72e531c3cd841ada69404150325c0396dbfd3b47ca0fec16e7aa5a54c86559663b80b41f0f12952d9c5ae66310
- SSDEEP 3072:4nXO3K044NMxKU0dhsq5VyMRLmVS6289t1LWZAtngJxejup3WX6yto:4ntr4Wxl6hHRGdLyp06
- TLSH T109248D1767A140F9E035C678C682851AF977BC661B31D9DF07A4B3B4AE233906D39BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_78a04309cb89f910c599c6b501ac0038_cobalt-strike_icedid_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_78a04309cb89f910c599c6b501ac0038_cobalt-strike_icedid_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_78a04309cb89f910c599c6b501ac0038_cobalt-strike_icedid_ryuk_satacom_vidar
- Size 223KB
- SHA256 5173a98e76d7d288d0d4a3790f70874997b741483cbe02062d1f5d62ddf6c05b
- MD5 78a04309cb89f910c599c6b501ac0038
- SHA1 cb195b970ef687c32b5a71cf008a08013f252dd2
- SHA512 7150b1c42a7d566804942021de16dfd27705db72e531c3cd841ada69404150325c0396dbfd3b47ca0fec16e7aa5a54c86559663b80b41f0f12952d9c5ae66310
- SSDEEP 3072:4nXO3K044NMxKU0dhsq5VyMRLmVS6289t1LWZAtngJxejup3WX6yto:4ntr4Wxl6hHRGdLyp06
- TLSH T109248D1767A140F9E035C678C682851AF977BC661B31D9DF07A4B3B4AE233906D39BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.