Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/06/2026, 17:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-03_9bc5896b5bd48fa631ac307630e645b0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-03_9bc5896b5bd48fa631ac307630e645b0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-03_9bc5896b5bd48fa631ac307630e645b0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-03_9bc5896b5bd48fa631ac307630e645b0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-03_9bc5896b5bd48fa631ac307630e645b0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 792KB
- Sample260603-warefscx9s
- SHA256 5185b9940a1ce42acaf720636fef37133a20e0688d9be0b029f87f1357ce0679
- MD5 9bc5896b5bd48fa631ac307630e645b0
- SHA1 661c3e31d22935650c97f353b955411cfcd88e8f
- SHA512 fb0ac6b8d6fab21d0f56d297769d4a0286351bb0328536558725f57dea2227a5298874c721f732028a9763fb6b8ff53396b69616998e42878865c28e9ef8043d
- SSDEEP 12288:DZ6irWcRGJlFoUQ0l9TRzy00zNVIYagDXsf3z:DZ6i6cMJlCUQ0l9TRzy0qNVIYagSD
- TLSH T147056912E6A404A9E10E8134E7954606FA777D565BE093CB23D8C23D1F727C06EF93AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10