Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 12:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_32bee224f9428473f03440d05c53f30f_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_32bee224f9428473f03440d05c53f30f_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-07-31_32bee224f9428473f03440d05c53f30f_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-31_32bee224f9428473f03440d05c53f30f_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-07-31_32bee224f9428473f03440d05c53f30f_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
- Size 4.8MB
- Sample260731-pb7dqsab77
- SHA256 bb7c61c56de4117c60e991d2667fd0717f795fb7bb053424e001e66e64373ca0
- MD5 32bee224f9428473f03440d05c53f30f
- SHA1 5f2490057dfe02d0cc2981972381b64684668db1
- SHA512 989a855ebe3ea0d88304bf855f38c524c0773a9cbc9126220fdaa44814add542f890a63c39c3e2e46d15977d550ad8db5d44173464cfb89ce576df8ae1e85f67
- SSDEEP 98304:QzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJU:QhfefPtHxcp9ym3nltDUJU
- TLSH T14936F141B3E256B6C4BF1678887A525AA770BC044315DBFB57C4B9796E333C08E323A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10