Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/10/2026, 04:36
Behavioral task
behavioral1
Sample
2026-10-16_e34da28176b52fcbbca08d076acf3c00_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_e34da28176b52fcbbca08d076acf3c00_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-16_e34da28176b52fcbbca08d076acf3c00_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-16_e34da28176b52fcbbca08d076acf3c00_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-16_e34da28176b52fcbbca08d076acf3c00_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
- Size 1.4MB
- Sample261017-e8ckhshw2l
- SHA256 493f990a6930e574eb6418e6acbbf5ef18b516d335b624daa554f8f1ff95da22
- MD5 e34da28176b52fcbbca08d076acf3c00
- SHA1 f69762a2441043f16936e66e5c3ced2904a8e9e9
- SHA512 e179ad7640f828f348063c5891d5534207447d96f52228cadf9e7bb00cc6cd34b5d0270d6fa8f881a86ea2f5e998f91be333c662e2c7c5ff227f387491125592
- SSDEEP 24576:cc5Zn/9jnlPDBBG7p8wuGAxtGQel+qDnV5VqvIF6w5lv:cc5znVD2aHxtGQPYVbqgI
- TLSH T13B65D026B66115FCD06AC136C6064632E7B1B8471B64AAEF0390C35D2F7B6E85F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3304-0-0x00007FF715D70000-0x00007FF716053000-memory.dmp upx behavioral2/memory/3304-1-0x00007FF715D70000-0x00007FF716053000-memory.dmp upx