Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/07/2026, 14:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_451d167d240c5ae63f97e56f1b0a2d0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_451d167d240c5ae63f97e56f1b0a2d0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-07-09_451d167d240c5ae63f97e56f1b0a2d0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-09_451d167d240c5ae63f97e56f1b0a2d0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-07-09_451d167d240c5ae63f97e56f1b0a2d0f_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 598KB
- Sample260709-r81cssds6t
- SHA256 13e92d336d265e4394ab9a4a01b870ce0a2d39fe54bd933bab8d5bc196160f89
- MD5 451d167d240c5ae63f97e56f1b0a2d0f
- SHA1 1689da5aa1b43fc29e00fbc11d25221f3c7260c6
- SHA512 d943c69d6068e7caa9ad4a0aeba67621891674a74dc38e58af0d551ce2a07a52e7395050e14260fd6beaa3c6d34cae8bb0501749fc2741f30ea85a020cc1e70d
- SSDEEP 6144:95eKQkB4p4rWTSIoXNHnr1GJOl4uvjgddFjEdi/4Uei4lVC9UiYgi347uSiox6ob:DZ6irWcRGJlFoUQfJC5YtIlVpH0a
- TLSH T14ED4BF13EAA804E9E10AC634E6E54616EBB57D475BA1D3CF231882152F627C07F7D3E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10