Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 18:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_06b226a5327e122ac13ae48e35178771_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_06b226a5327e122ac13ae48e35178771_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260629-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-02_06b226a5327e122ac13ae48e35178771_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-02_06b226a5327e122ac13ae48e35178771_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-02_06b226a5327e122ac13ae48e35178771_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.3MB
- Sample260702-w3tqaahs6j
- SHA256 d0f5c09a9e54562500ba03a3e63fb255a870fda780eef5a1d539c537113dd471
- MD5 06b226a5327e122ac13ae48e35178771
- SHA1 b0618ba34f6b9b5362d042800cfa43425ba6d357
- SHA512 c494d5046c377a6cf4b6c2ec870b1f27128c5cfbe88ee3c5692c83513d4bf5740ddc9d6e6b703799b3ffbc8954522c75e54142c9eeccb5fc71b8dfd090994a45
- SSDEEP 24576:DZ6i6cMJlancMJlPooFpGdasQr5jcAkSYqyEoD5TvinrmC:uRJARJlpYq+56rX
- TLSH T1AC554916F6684BA5D06BC178C5D29A4AEA733C464F3087CB13949E293F237D19E39363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10