Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/10/2026, 04:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_b81d4d0d3d3bf933a6c2db950f5538d5_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_b81d4d0d3d3bf933a6c2db950f5538d5_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-10_b81d4d0d3d3bf933a6c2db950f5538d5_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-10_b81d4d0d3d3bf933a6c2db950f5538d5_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-10_b81d4d0d3d3bf933a6c2db950f5538d5_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.0MB
- Sample261011-e118xaez71
- SHA256 50be8ba5a8289be14fd1b5cbff1d147e03ab959110fce3749bbf83c76402dd7b
- MD5 b81d4d0d3d3bf933a6c2db950f5538d5
- SHA1 3a28a85372b2c8a33a53331afd7b478652b456ab
- SHA512 b972eb1023dc4696ceee08cec1c3d799a5183ccc5314faedf4951460be364dd542a5e32136fc2d02b56385ecbe7b9178173f935da8cfd21e4104cbba493912c5
- SSDEEP 24576:DZjzyacNVEuzyUD5Tvinrm5wzijSD5TvinrmC:huX56rN56rX
- TLSH T18E354917A6980FE9D12F8174C9920656E7737C225F2087DF13646E263F326D0AE3A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10