Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/07/2026, 14:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_95950dd5f52ae3fa3851434cedb01b4f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_95950dd5f52ae3fa3851434cedb01b4f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-07-31_95950dd5f52ae3fa3851434cedb01b4f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-07-31_95950dd5f52ae3fa3851434cedb01b4f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-07-31_95950dd5f52ae3fa3851434cedb01b4f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.2MB
- Sample260731-rc5bwabe74
- SHA256 2f51eb6d1826ce64f75f45e7ff5939f2613c8ffcbfe8508b56c5fe57f5b0192a
- MD5 95950dd5f52ae3fa3851434cedb01b4f
- SHA1 6316584a11c271a5b7424701cb2d408076cbecb0
- SHA512 8193ccaa7cc98976c85e68f39f158cced6af90179e59f4229d7f7125d4458abf2237219c204edfb0245e260450e93bba69b25ea8112696e380555e54cfc6194b
- SSDEEP 24576:DZ6i6cMJlDzy8cD5Tvinrmh5jcAkSYqyE:uRJ5I56rapYq
- TLSH T1BA45F516E2644BA4D06F8179C7929656FA733C454FA087CB02C0EA3D3F276D19EB9723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10