Analysis
- max time kernel
1s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 20:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_74c1f0a2ae6e2370733cd5adf75774fb_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_74c1f0a2ae6e2370733cd5adf75774fb_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-28_74c1f0a2ae6e2370733cd5adf75774fb_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-28_74c1f0a2ae6e2370733cd5adf75774fb_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-28_74c1f0a2ae6e2370733cd5adf75774fb_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 820KB
- Sample260728-za5tmavfre
- SHA256 74bb0c11b69a7a44bf9f094eb8ca064718b671a3ccc24f13e2a2646405acab2f
- MD5 74c1f0a2ae6e2370733cd5adf75774fb
- SHA1 33da16f33205402edb1d2625309900f704c4588e
- SHA512 bdd4daddfbace7c9e7493ffee927fb79b49ea1b94fea95e845a22983ffc0bdf84660b3751ff1633e202a9f19af68943b8d0f9dcbf25c46f07f0767c8aa97a4e1
- SSDEEP 12288:DZ+yPz5L8aEFoe/YCD3JeU7vinrmbot1f1i+Qw:DZjzyaEFoe/YCD5TvinrmbotF1i+Qw
- TLSH T197056B03A6A40FE9E11F817499A20656E7737C125F6097CF1364AE253F327C0AE397A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10