Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
06/06/2026, 12:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-06_e69095cf8231177f1713ac4d397978dc_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-06_e69095cf8231177f1713ac4d397978dc_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-06_e69095cf8231177f1713ac4d397978dc_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-06_e69095cf8231177f1713ac4d397978dc_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-06_e69095cf8231177f1713ac4d397978dc_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 2.6MB
- Sample260606-pg7lpady7t
- SHA256 e2b784b0418dc7a643fccafbb74dcb85cdd4dd4a4e9dffe92ff6e95b023acd77
- MD5 e69095cf8231177f1713ac4d397978dc
- SHA1 c12998a9b993aba205064af9cf4ac124db2a5057
- SHA512 2e34c8d09001154b1ec0f165bab944729a154aacc2ed9a428847672f7769c12d4ab9d6e12d3a32d46bbde1c0f97057eeb6f1323d22b47315b0248381dd159734
- SSDEEP 24576:DZ643mnXoZ6i6cMJlCUQ0l98bsyKaohcqpHfwcYTqMi8CtBd2QHCHmTBW5kD5Tv9:73kHRJ+qJtb2Ij56rX56rX
- TLSH T1F3D5E312A5584B60DC2F8D7485915576FA323C4FBF2DB7CB1E40BA293E736C0A939263
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10