Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260630-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 15:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_5ead573f1635536303a29b684c9485ff_amadey_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_5ead573f1635536303a29b684c9485ff_amadey_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260630-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-02_5ead573f1635536303a29b684c9485ff_amadey_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-02_5ead573f1635536303a29b684c9485ff_amadey_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-02_5ead573f1635536303a29b684c9485ff_amadey_cobalt-strike_icedid_luca-stealer_njrat_ryuk_satacom_vidar.exe
- Size 2.5MB
- Sample260702-sd63jagw5v
- SHA256 b38f812f0db8755dc1292c67480c4e586708f5adb92e0779dd1da40e7c85c16b
- MD5 5ead573f1635536303a29b684c9485ff
- SHA1 1f66e37cfe895fdb5eefb2998cbb1b112019763c
- SHA512 44fc53baae90c66a3cc4718ad1d81528f6640d1584a5c4f71c9ac21862cc3c12c141a34e945b26fe56c7fa11bcedcd2ba2f30e0f8fd0d1b9859430b16c7b15b3
- SSDEEP 49152:B+Cq99LykqJtb2IoTVBXdcx+Cq99LyHHI+t6O8NY:8hfvdB0o2
- TLSH T1D5C56B13F6A441B4D026C078C696963EE93234458B32ADDF02849FED7FA7AD19B39731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10