Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/05/2026, 18:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_d46afa52e6a96f44026ab2af3922a4fa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_d46afa52e6a96f44026ab2af3922a4fa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-05-29_d46afa52e6a96f44026ab2af3922a4fa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-29_d46afa52e6a96f44026ab2af3922a4fa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-05-29_d46afa52e6a96f44026ab2af3922a4fa_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 981KB
- Sample260529-wpghssbz7x
- SHA256 fe430a5f158d7701f41142c916429f5305082b9d00a467c8546f474f03f45ad4
- MD5 d46afa52e6a96f44026ab2af3922a4fa
- SHA1 026b6795869912afb5764e9ee503ee9c6e436e19
- SHA512 11b2a3fba0f46b4d22397797a97dea245d42a864be0c4d26419f16cdeee620e14ccf569f6635808d11864fef9dbbe9c5102d54a762b3c2085360eca7413606c2
- SSDEEP 24576:DZ6i6cMJlCUQ2RojsqiX4pnD5TvinrmVD5Tvinrmb:uRJw56ru56r
- TLSH T134256A16A6984FA8D12F8174D9924566E7737C069F2087CF1364BE263F327C0AE39397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10