Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 13:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_c76c3a756323482775c633b4d2a38971_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_c76c3a756323482775c633b4d2a38971_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-02_c76c3a756323482775c633b4d2a38971_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-02_c76c3a756323482775c633b4d2a38971_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-02_c76c3a756323482775c633b4d2a38971_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
- Size 2.0MB
- Sample260602-qrd8kaev2w
- SHA256 2e2d5f716e8a87b08b744aa703437bb353d5486ca13e7824f74cabe8a2e9433d
- MD5 c76c3a756323482775c633b4d2a38971
- SHA1 d7516a7cb2d0dc9f2f37e5f20bfc960d45c3d68e
- SHA512 44babcb46cf0e70a11423527a5e0c6a44ccef2e11c40f97dea083b20790ee0f5374859817b68d34e0e42981cebfdd36ffd5bd2991ecb9a4f207b13d6f05c8ce9
- SSDEEP 24576:DZ643mnXoZ6i6cMJlaEyovTseTZe0p4Ek4niOkl/A04szE87JKTvm51owkWu0ya:73kHRJleW4SkZP4sz9Mb41lkWu0ya
- TLSH T192A51916F6B84366E0BAD175CBE6A656FA3338451B7086CF0384D23C1F23AD18A75727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10