Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/04/2026, 17:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win10v2004-20260130-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-04-23_62a7f310268743876361b2d3be59fb6e_amadey_cobalt-strike_elex_glassworm_hijackloader_vidar_wannacry.exe
- Size 849KB
- Sample260423-vsqefaa17r
- SHA256 089cabad25fdd0bd4b124cc646ea25276e42e21601d9bfacb385198279955859
- MD5 62a7f310268743876361b2d3be59fb6e
- SHA1 c223555f629571faaf31afa09460f0033a7012d3
- SHA512 cd6f9909b4db99ff946d242a5793278f5396e7624bfd72bbb9e6bb141ef08a4c5e8b65320482627978aeb0329896211a0b06f8ebf65d85faa0e652e519ff4ccd
- SSDEEP 12288:snEy6xMGNTCWsTGQ4/mEMbZa9NGcjbvZb5NqSQwq/Vta8+ChTOI+T:snt6xDxmB9aqcvhbpQhVMChTo
- TLSH T1D5055C57EAA4A9E1C6BA4434CD61C711E732BDA40F1087DF6264F36E4E336D0AE39B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10