Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/05/2026, 15:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_ac86579fa31c9c2611cdea679ad4aaf4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_ac86579fa31c9c2611cdea679ad4aaf4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-29_ac86579fa31c9c2611cdea679ad4aaf4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-29_ac86579fa31c9c2611cdea679ad4aaf4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-29_ac86579fa31c9c2611cdea679ad4aaf4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 844KB
- Sample260529-s8vyrafw7x
- SHA256 de29ba14e26b296c1c26ef4a30556e60ce6a1a9a44d46e9fc3660a78227d9c74
- MD5 ac86579fa31c9c2611cdea679ad4aaf4
- SHA1 2f27fa44068d132b2a475af7822f2938b05280d1
- SHA512 8f0e5303402c95f9bd79d90fc3ae4357dfebaa46950eda835f1ef473a84aaf0ee7776731c463667f099e761622f6b138be445f04cbf0c0d6aa2309f74623cc20
- SSDEEP 24576:DZ6i6cMJlCUQ2RojsqiZaiExmYasqD5TvinrmC:uRJr56rX
- TLSH T120057B03A6980FA9E11F8134D9A24556EB777C065F6087CF1364AE253F727C0AE393A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10