Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/06/2026, 12:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-05_1c065b100403814ef40eb8b57e26a0f9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-05_1c065b100403814ef40eb8b57e26a0f9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-05_1c065b100403814ef40eb8b57e26a0f9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-05_1c065b100403814ef40eb8b57e26a0f9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-05_1c065b100403814ef40eb8b57e26a0f9_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 2.1MB
- Sample260605-ptbpsagx8j
- SHA256 77890a1d42e2804f2cf036202b10624282d0c085d7f4922a6d4d23e94c6d46e2
- MD5 1c065b100403814ef40eb8b57e26a0f9
- SHA1 12a70716c41771cb05612935ae3d431e647c0702
- SHA512 0218a3aa96fc8540f195dc7d706f070f2fe4661c9dd02a35c1786dea3113642aa58e9d6cb6ede88eeaee90a16f8e9bc971e3edce6582c2ad7664c4a714d4b165
- SSDEEP 24576:DZ6i6cMJlCUQ0l98bRaQf+BeD5TvinrmAYTqMi8CtBd2QHCHmTBW5tZe0p4Ek4nQ:uRJw56r+qJtb2IEeW4SkZP4sz9Mb
- TLSH T1A7A51916F5788722D077C0B9C5D2AA9AFA3238465F308BCB03459B2C3E277D59936736
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10