Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/06/2026, 19:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_ca257fd14f0493723ab8e8d903054aec_amadey_cobalt-strike_fabookie_hellokitty_luca-stealer_njrat_remcos_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_ca257fd14f0493723ab8e8d903054aec_amadey_cobalt-strike_fabookie_hellokitty_luca-stealer_njrat_remcos_satacom_vidar.exe
Resource
win11ltsc2024-20260618-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-06-28_ca257fd14f0493723ab8e8d903054aec_amadey_cobalt-strike_fabookie_hellokitty_luca-stealer_njrat_remcos_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-06-28_ca257fd14f0493723ab8e8d903054aec_amadey_cobalt-strike_fabookie_hellokitty_luca-stealer_njrat_remcos_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-06-28_ca257fd14f0493723ab8e8d903054aec_amadey_cobalt-strike_fabookie_hellokitty_luca-stealer_njrat_remcos_satacom_vidar.exe
- Size 1.4MB
- Sample260628-xsaebsb16w
- SHA256 106660e1304cc0daceaba12a009671a3946e26b9f470cac1d7a336f880475df5
- MD5 ca257fd14f0493723ab8e8d903054aec
- SHA1 8ee30108bd77fa502e132dd62190422e4ef291ae
- SHA512 eb4f2c8a9ad63ec7afbad5a146f50ff3bcd1aa6bd76e302e8b565fe3987f8cf5bdf3f173ce9e356539a84beacf99185b3e756ac95e45705c9e33c3560d4544b8
- SSDEEP 24576:KGWVfVR38PUptKTsj36PwrsMy6i1zuxw7ljsarakkqt4jtwR:0V18y0U36PHMy6i1zuajsauZjaR
- TLSH T153657D1A73E840E5D4779538C6658652EA71B83127319BDF2390D23D2F37AE09E39F22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10