Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/06/2026, 13:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_4f73e8617b6c2a0e9ef80d9ee6cb5a11_cobalt-strike_satacom_stop.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_4f73e8617b6c2a0e9ef80d9ee6cb5a11_cobalt-strike_satacom_stop.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-06-01_4f73e8617b6c2a0e9ef80d9ee6cb5a11_cobalt-strike_satacom_stop.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-01_4f73e8617b6c2a0e9ef80d9ee6cb5a11_cobalt-strike_satacom_stop.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-06-01_4f73e8617b6c2a0e9ef80d9ee6cb5a11_cobalt-strike_satacom_stop.exe
- Size 1.6MB
- Sample260601-q2wwcset61
- SHA256 048194ae130bd86e89bb1934500e7db5109b2ef76d6235cb44d5a5fee72a71e6
- MD5 4f73e8617b6c2a0e9ef80d9ee6cb5a11
- SHA1 4975b1d762b5ac9a79972e8e1bb5a455b66d713e
- SHA512 f93ffedf6a7531c08a3b375d2043af7ffd06cefcd6716e18412c57410d9e3a5bd66cbebdd6c20f782b52f4d2da78f55e1282900659af4c78022bca1c9841f87d
- SSDEEP 12288:9hzVCT5Iigo+qwX5j5hzVCT5Iigo+qw8a0wIk0BX3RKuemGd70ioGuVWW6oI7:zIT5t1+qwJj3IT5t1+qw8afDd70iTWC7
- TLSH T1C9854B2037F44C23F1F715766AB1AA040C7ABA6A4738E18F65D9068E69737C04977BE3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10