Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/06/2026, 10:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-06_4cccadf880105c1da5e961a146ab4902_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_4cccadf880105c1da5e961a146ab4902_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-06_4cccadf880105c1da5e961a146ab4902_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-06_4cccadf880105c1da5e961a146ab4902_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-06_4cccadf880105c1da5e961a146ab4902_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.8MB
- Sample260606-m27fbact2z
- SHA256 61ba515d38d5da1fa65320c2f3b4bf7361a45e7bfe38affbb4af5d3400770435
- MD5 4cccadf880105c1da5e961a146ab4902
- SHA1 9ae6db59565edcc8264636c188f24a1cecff8e45
- SHA512 e5866a49ec485139c42b2957dc45fab3d11e951f4986206cde96f81e66d1cc9629034e9bd9b1d9f9d278c02f5986e18188a2664ed8499805f48bc1acc4a8d934
- SSDEEP 24576:DZ643mnXoZ6i6cMJlancMJlPooFhQtYs5jcAkSYqyE3YTqMi8CtBd2QHCHmTBW5:73kHRJARJspYqOqJtb2I
- TLSH T187955B26F6688275D073C0B9C5D2AA5AFE3234425B308ACF1385D7292F277D5DA3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10