Analysis
- max time kernel
0s - max time network
2s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/05/2026, 14:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_33a724fe821bfa7a7608b5c988966e65_amadey_cobalt-strike_darkgate_hijackloader_satacom_smoke-loader_stop_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_33a724fe821bfa7a7608b5c988966e65_amadey_cobalt-strike_darkgate_hijackloader_satacom_smoke-loader_stop_vidar.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-22_33a724fe821bfa7a7608b5c988966e65_amadey_cobalt-strike_darkgate_hijackloader_satacom_smoke-loader_stop_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-22_33a724fe821bfa7a7608b5c988966e65_amadey_cobalt-strike_darkgate_hijackloader_satacom_smoke-loader_stop_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-22_33a724fe821bfa7a7608b5c988966e65_amadey_cobalt-strike_darkgate_hijackloader_satacom_smoke-loader_stop_vidar.exe
- Size 2.1MB
- Sample260522-rnva2sf131
- SHA256 f6714870930d38013c38934a2f2c090634abb656f51afec5465fd129162c10ae
- MD5 33a724fe821bfa7a7608b5c988966e65
- SHA1 9ba82591d40cbb2d3729d4b619f816966d45e703
- SHA512 243e7f9ab77bd774274c89b84fe84059722e5f0acec4c2b7172c39ce8e061e7ddaeb7cf4bfc7a8aa932366033024f877b4cedd91682c36eea22ec5a1b524513a
- SSDEEP 24576:xioA+cuzKPgssStPUvg7Ze0p4Ek4niOkl/A04szE87JKTvm9eKdYH:HhKPgssSt2gVeW4SkZP4sz9MbIc
- TLSH T1EBA51816B2F88726E0B7A275C9F69655EA333C515F3087CF1281672D2E32AD08A35737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10