Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/06/2026, 13:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_b288398871fcc45919a50eca81cc2f22_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_b288398871fcc45919a50eca81cc2f22_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-02_b288398871fcc45919a50eca81cc2f22_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-02_b288398871fcc45919a50eca81cc2f22_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-02_b288398871fcc45919a50eca81cc2f22_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.5MB
- Sample260602-qvgg4aev81
- SHA256 6ef5b1ea2222bd4a4b4333a8bb7edec02d9dcb0d7388b88055a5ac52c0c614ab
- MD5 b288398871fcc45919a50eca81cc2f22
- SHA1 07562e46abebc24c339cc787ae4e372428de6486
- SHA512 32bb5e58f3a9c6c3c44cbf8da02821708d4b187a02ddfbeb70d0e7dafb2203e31163b7c628689d18808351c42a1b49b5d5203b1a6c3328c3e934693388a4f1ff
- SSDEEP 24576:DZ6i6cMJlCUQ0l9TRzy0JxwG6KaE45jcAkSYqyE05jcAkSYqyE:uRJupYqqpYq
- TLSH T1A8755B16F6748675D073C0B9C5D2A68AEE7134865B308BCB1389C3782F277D29A3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10