Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/05/2026, 02:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_1a00d8657b545b38c6a27e476315dcf1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_1a00d8657b545b38c6a27e476315dcf1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-22_1a00d8657b545b38c6a27e476315dcf1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-22_1a00d8657b545b38c6a27e476315dcf1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-22_1a00d8657b545b38c6a27e476315dcf1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.6MB
- Sample260522-dcdbhafy5v
- SHA256 61f6e6fa444ba97d7a78261b02e9b50a27d7fd790343606edd04603d2f77ee1b
- MD5 1a00d8657b545b38c6a27e476315dcf1
- SHA1 bef156f80cc32051b8d9a70256cdb29dd71ac5fa
- SHA512 b1c1547cdbf2d199c0b9d5d94e929187ff245a99df40913732cb5b1fe8ccc056dba7d042677a53594a3d52b2860b0af465bb5dc2156300f20df4d317ca7432c0
- SSDEEP 24576:DZ6i6cMJlaTeD5Tvinrm5FaCoTD3mnXoZ643mnXoZ6i6cMJlaTeD5Tvinrm5FaCv:uRJP56rl3k03kHRJP56rQ
- TLSH T147756A03A6980FA8D11FC1789A964662E7737C125F2097CF1354AE263F72BD0AE39357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10