Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 16:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_d62d06037050a971af66f418e1271ad4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_d62d06037050a971af66f418e1271ad4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-29_d62d06037050a971af66f418e1271ad4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-29_d62d06037050a971af66f418e1271ad4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-29_d62d06037050a971af66f418e1271ad4_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.1MB
- Sample260930-traf6axt5m
- SHA256 33d67a454863cbb40ff587251cc2a4b379d72646cf9ffffb8187ca5a8e325947
- MD5 d62d06037050a971af66f418e1271ad4
- SHA1 e2c63270d826c785e66502538de035b0ea861d86
- SHA512 8b9c7f67741b5ddd93214e9b8efc511c69ef7e7774064ffd63ba029019cd74c815254e34eb489457b3a3b151d5b3f9f8bfd7ea2b00ed7dc9f51fcaf1c3fb9aeb
- SSDEEP 24576:DZjzyaEzD5TvinrmkzywFqRdjD5TvinrmrD:h456r9Q56rU
- TLSH T1C045C216E2980FA8D12F8174CB914556B7737C225FA097CB12D0EE3E3F326906EE9653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10