Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 14:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_b1cc253f69da042549739890e34ac69b_amadey_cobalt-strike_conti_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_b1cc253f69da042549739890e34ac69b_amadey_cobalt-strike_conti_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-04_b1cc253f69da042549739890e34ac69b_amadey_cobalt-strike_conti_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-04_b1cc253f69da042549739890e34ac69b_amadey_cobalt-strike_conti_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-04_b1cc253f69da042549739890e34ac69b_amadey_cobalt-strike_conti_hijackloader_satacom_vidar_wannacry.exe
- Size 635KB
- Sample260604-rt99fsgv4x
- SHA256 4d3e2f6091ca43d2e6c60ec4d515de44960d9c5dd8ee9acc6ff8b543c38b0bcb
- MD5 b1cc253f69da042549739890e34ac69b
- SHA1 c4d1ead74554cf74d20f1719954bc31db76659fa
- SHA512 a9a765dccb017dee697a6d90afb3042782f5a1014cbb3ff356ac93efc672da48f3ecb6f861fd24ade7f00a3401bf18470887d08812330c266e8eba73f401d997
- SSDEEP 6144:95eKQkB4p4rWTSIoXNHnr1GJOl4uvjgddFoERe0MEsaqfCza7fIqLsFLZKQYzNho:DZ6irWcRGJlFoL0dhqfaagq2g3ZUz
- TLSH T134D48D03E6D500E5D68A8134DD9A8A12FA35BE921B2097FF1368B7252F327D0BF39754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10