Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/10/2026, 09:58
Behavioral task
behavioral1
Sample
2026-10-22_6a4594c0aa8da91d460ad96acdac9293_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_6a4594c0aa8da91d460ad96acdac9293_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_6a4594c0aa8da91d460ad96acdac9293_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_6a4594c0aa8da91d460ad96acdac9293_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-22_6a4594c0aa8da91d460ad96acdac9293_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
- Size 1.4MB
- Sample261024-lzpl2stvfs
- SHA256 ce49face5d06ae844cff41d4b906b82a5df9f1aeb8d0039fdba74767f2341dcf
- MD5 6a4594c0aa8da91d460ad96acdac9293
- SHA1 cb37dbb19c67da3507109a5bae6e04210e7b4be6
- SHA512 24066e5e6ff74791da3c1bb7ab551bfaad27a483d09f1216badf11b70e475ee5e0e69ec273a89a783e7770b5a75714bf32c0e2cff2c7bfc5bfc7151ed4bc08a7
- SSDEEP 24576:QYCZnM9j4lPDBBGaaKngL2jdshRTdG1YxITqvfPkbIcbjLm:QYCk4VDjarSj8RoTCCW
- TLSH T1D965E026B69110FCD06AC136C7069632FAB1B8471B65A6EF0390D36D2E7B6E85F3D710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4224-0-0x00007FF7105A0000-0x00007FF710882000-memory.dmp upx