Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 01:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_0b5ef4bcc8069aa95ec8dc9a9afe9a7b_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_0b5ef4bcc8069aa95ec8dc9a9afe9a7b_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-02_0b5ef4bcc8069aa95ec8dc9a9afe9a7b_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-02_0b5ef4bcc8069aa95ec8dc9a9afe9a7b_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-02_0b5ef4bcc8069aa95ec8dc9a9afe9a7b_amadey_cobalt-strike_hellokitty_hijackloader_luca-stealer_njrat_remcos_satacom.exe
- Size 718KB
- Sample260602-bkllqsat31
- SHA256 54a34a5fd9c83c734dbd224412bd2bb77d68f5a38f59c915d8a1c5e17ccf66db
- MD5 0b5ef4bcc8069aa95ec8dc9a9afe9a7b
- SHA1 d32e57cc8a3821d03c4d57f8b370909b40fd2703
- SHA512 6d495dee6ac0d9aa0665810dd42dd148b60a419784d28209ded453120fcd171848d2ded773ccc96cd5680087d002121567417c29c07a84586226ca6cab83f349
- SSDEEP 12288:KofLLeVf9GA8VmU4EFHLTUrqlMBU66bZD282Ds8xFbeIjK:KGWVfVR38PUreMQZD28ss87eIW
- TLSH T128F4AF01B4D0C0B2E476A1332468DB3A9A78F6204B315EDB5398DD7D1F712D2663B6BB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10