Analysis

  • max time kernel
    0s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    18/07/2026, 07:14

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-18_8a13c9e11ff2a0412b8979a2dfc1e903_amadey_cobalt-strike_hijackloader_redline-stealer_rhadam.exe command="C:\Users\Admin\AppData\Local\Temp\2026-07-18_8a13c9e11ff2a0412b8979a2dfc1e903_amadey_cobalt-strike_hijackloader_redline-stealer_rhadam.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: Invalid access to memory location.

General

  • Target
    2026-07-18_8a13c9e11ff2a0412b8979a2dfc1e903_amadey_cobalt-strike_hijackloader_redline-stealer_rhadam.exe
  • Size 837KB
  • Sample260718-h23pxaft41
  • SHA256 0ca123783a1a932851d13e2e0e9de6039c6dda61dee21cfff68e0d47e6f4a8ed
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads