Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 04:36
Behavioral task
behavioral1
Sample
2026-10-28_52ad84f9d1ea7a3fac9f783bd9fd14f8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_52ad84f9d1ea7a3fac9f783bd9fd14f8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-28_52ad84f9d1ea7a3fac9f783bd9fd14f8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-28_52ad84f9d1ea7a3fac9f783bd9fd14f8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
- Target 2026-10-28_52ad84f9d1ea7a3fac9f783bd9fd14f8_cobalt-strike_icedid_mespinoza_njrat_ryuk_satacom_vidar.exe
- Size 1.4MB
- Sample261030-e8fl6swv2p
- SHA256 31fbc86f7d42e9ebef4684a7b12d0c007def855f8e782f50a0ce7978bba0d095
- MD5 52ad84f9d1ea7a3fac9f783bd9fd14f8
- SHA1 53115d2c3505a8e440c408bebefcb3a62dc3740c
- SHA512 1eca8a792268677e0889f1ecbb5d84982e455f69ffb2695353b8de415de3a9d0f7e52db3d4f246a5748e32171b9c6657770d501d26c1d78b51c6dfffa1909a23
- SSDEEP 24576:0x5ZnY9jnlPDBBGq2LrgnO56dLg+ya8/6rvUCicthysf3Aq0sv3FZU7nhCDs:0x5MnVDQLU4Kk/yiqys/IsfDihCo
- TLSH T1C865E166B6A500FCD05AC136C6064632F7B1B8574F60AAEF1390D3692E7B6E85F3D720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3292-0-0x00007FF77AA90000-0x00007FF77AD72000-memory.dmp upx behavioral2/memory/3292-1-0x00007FF77AA90000-0x00007FF77AD72000-memory.dmp upx