Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/07/2026, 18:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9196fa5a5e7d1315385e785283b8d87c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_9196fa5a5e7d1315385e785283b8d87c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-17_9196fa5a5e7d1315385e785283b8d87c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-17_9196fa5a5e7d1315385e785283b8d87c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-17_9196fa5a5e7d1315385e785283b8d87c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 1.3MB
- Sample260717-xd5xpae18w
- SHA256 251a26607116b3bcf2814d30c5ae32684bb44d7e387bbb291eb9b9346e39d336
- MD5 9196fa5a5e7d1315385e785283b8d87c
- SHA1 7658eeb00c87d2d949eb187b1114ce81880080f1
- SHA512 23b4c24966e3818f7af205ef40eeb40d872e58d26f77b752bd43d6b363dc2cbd47722bff9cff60302724108fec8362d3d3ca2245754fc2baf9e005bdfa0d54cf
- SSDEEP 24576:DZjzyaEFoe/YCD5TvinrmbohdkdixfB0Le5ji0hmxNrM:hm56rLPji0Aj
- TLSH T171555916F6A44BA5D02BC078C5D2569AEA733C425F308BCB13559E283F237D19A3A773
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10