Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
04/06/2026, 16:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_df3093687e15c8958b7cce4a74d55371_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_df3093687e15c8958b7cce4a74d55371_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-04_df3093687e15c8958b7cce4a74d55371_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-04_df3093687e15c8958b7cce4a74d55371_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-04_df3093687e15c8958b7cce4a74d55371_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 2.4MB
- Sample260604-th3rcaav8s
- SHA256 e47876d6e914171d5f1e1d21888324d1fa29d0341730e33c6bf9e11a19ab1e60
- MD5 df3093687e15c8958b7cce4a74d55371
- SHA1 7652d4d063bf6c26121d63124ac5952675fbe6c1
- SHA512 ff25683e69b0b37e5d8ac0f53db8399cc06735236fbd458cb190274c777bcfe65469a8ddb0eedbb2ecfce7574b1963b3c0510b9cd0dba04796bacc7e575ce60a
- SSDEEP 24576:DZ6i6cMJlCUQ0l9TRzymqzRoKhYTqMi8CtBd2QHCHmTBW5bYTqMi8CtBd2QHCHmF:uRJTqJtb2IdqJtb2Ij56rapYq
- TLSH T171B53A25F6648B65D077C0B9C5D2969AEA3238425F308BCB1346DB283F277D1D93A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10