General
- Target 2026-08-20_d706f49b8f22ea431365ad619eddb653_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- Sample260820-vjaydsef56
- SHA256 364ba82fcf86cf6466145bed269bf1e224d107b68c1a4e3758b40e7a1ea6acdc
- MD5 d706f49b8f22ea431365ad619eddb653
- SHA1 dffa876c25430a0cfe6134cf045865530f9f6622
- SHA512 1f96f86113ebf55f4d689af25979ff366f23c88b0c50a8dbe53af08ab44382698a9309bcc432190ceab098168e493257eef57b4ba07ec8ef52a62644963aa1bc
- SSDEEP 6144:p+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/0KtEfskrw:pYkDi5eiQ7uysMFZzN/0wLK
- TLSH T143847B16F74408FDD897C178CA964546EA39BC9E0B71EEDF1788422A2F227F04E39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_d706f49b8f22ea431365ad619eddb653_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_d706f49b8f22ea431365ad619eddb653_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_d706f49b8f22ea431365ad619eddb653_cobalt-strike_icedid_ryuk_satacom_stealc_vidar_xworm
- Size 377KB
- SHA256 364ba82fcf86cf6466145bed269bf1e224d107b68c1a4e3758b40e7a1ea6acdc
- MD5 d706f49b8f22ea431365ad619eddb653
- SHA1 dffa876c25430a0cfe6134cf045865530f9f6622
- SHA512 1f96f86113ebf55f4d689af25979ff366f23c88b0c50a8dbe53af08ab44382698a9309bcc432190ceab098168e493257eef57b4ba07ec8ef52a62644963aa1bc
- SSDEEP 6144:p+GYnA0zeWiDi5eJwQ8kV3f+RysMFZzN/0KtEfskrw:pYkDi5eiQ7uysMFZzN/0wLK
- TLSH T143847B16F74408FDD897C178CA964546EA39BC9E0B71EEDF1788422A2F227F04E39B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association