Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260617-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/06/2026, 19:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_c04c1302621e030bcfabdd88dc2f1780_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_c04c1302621e030bcfabdd88dc2f1780_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260617-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-28_c04c1302621e030bcfabdd88dc2f1780_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-28_c04c1302621e030bcfabdd88dc2f1780_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-28_c04c1302621e030bcfabdd88dc2f1780_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 1.8MB
- Sample260628-x2vrmact6z
- SHA256 d1255f0e169c212447efedba6b7b1f28425c9ec98d94f97de25c097f11530e1f
- MD5 c04c1302621e030bcfabdd88dc2f1780
- SHA1 2eef0994311a88a257ecdf09df2f9f9f6e186c88
- SHA512 f0c4098e3af1d068aaec84ab9a9ba690e4d249ac08c8038f88b89ef16a8ca78a4ff4213422e4dee23715160ca90d9b8c98a526e303f2d4e22adc66477a59d1ba
- SSDEEP 24576:DZjzyal/TWaLl3z0zDZojVCarzy63mnXoZjzyal/TWaLl3z0zDZojVCarzy7:hdT1LljPR3kMdT1LljPs
- TLSH T18795AE17F7A014F8E5278139C9A54A12E7B2BC260760CADF136457262F337D06E3EBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10