Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 23:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_3d8700b96c3b12fd05af9be79ac53b0b_cobalt-strike_emotet_glassworm_hijackloader_icedid_njrat_remcos_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_3d8700b96c3b12fd05af9be79ac53b0b_cobalt-strike_emotet_glassworm_hijackloader_icedid_njrat_remcos_satacom_vidar.exe
Resource
win11ltsc2024-20260617-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-28_3d8700b96c3b12fd05af9be79ac53b0b_cobalt-strike_emotet_glassworm_hijackloader_icedid_njrat_remcos_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-28_3d8700b96c3b12fd05af9be79ac53b0b_cobalt-strike_emotet_glassworm_hijackloader_icedid_njrat_remcos_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-28_3d8700b96c3b12fd05af9be79ac53b0b_cobalt-strike_emotet_glassworm_hijackloader_icedid_njrat_remcos_satacom_vidar.exe
- Size 9.0MB
- Sample260628-26blrsf17w
- SHA256 77f39563ee145d3950b4b2f2d761942f5b0b7f7f30d2e211958a13e80585272b
- MD5 3d8700b96c3b12fd05af9be79ac53b0b
- SHA1 4342d6c3ad724b284ebab93c013229cd723abbf4
- SHA512 4eb440d2ea08fcdc25e782ed7d57091f31ba7d514a1e98c4f9c226a776279c9d141978c982d61c3a5f1926b093ac7f30f6cbe896dcec3ae986155cc68e762f2d
- SSDEEP 98304:KoDDklJ6qCu5x6M1WoDDklJ6qX5LapIFoq2VjnmU:K8kLri8kLh5cIFGnb
- TLSH T138966C1276E440A9D1AA8634DF668632E7B17C554BF1D7DF6190B2CA2E33BC07A39313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10