Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/09/2026, 00:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_56562ed186e818a8ae01951affb37ec1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-09-29_56562ed186e818a8ae01951affb37ec1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-29_56562ed186e818a8ae01951affb37ec1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-09-29_56562ed186e818a8ae01951affb37ec1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe
- Size 1.8MB
- Sample260930-a2d3jstgph
- SHA256 9e6c78a9dc0b800689eace8d0a8ff78477c71e75f610f534947f5620acc26b28
- MD5 56562ed186e818a8ae01951affb37ec1
- SHA1 fe5b703a57c790888a5239b25e2ff8da1acd3592
- SHA512 a2894c73d7061c7f3472532bcacd4f5e120030edb6b59e09c7a6d55231132ac660d8e8744f0a7879c5ac4a8cfd3d7137e6724ab2003e105b97014dd6c06f5517
- SSDEEP 49152:itbv4aze+Kyov8si1/+jdAIDmg27RnWGj:itbAaze58x1/+j3D527BWG
- TLSH T10085BF17B29A51E8D06ED0B4C7459136FA727C410B30AAEF0690F7292F77AE46F39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-09-29_56562ed186e818a8ae01951affb37ec1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe"C:\Users\Admin\AppData\Local\Temp\2026-09-29_56562ed186e818a8ae01951affb37ec1_akira_cobalt-strike_icedid_njrat_rusty-stealer_ryuk_satacom_vidar.exe"1⤵PID:4668