Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 18:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_569574959e3f0ad01baba108c71ccaad_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_569574959e3f0ad01baba108c71ccaad_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-03_569574959e3f0ad01baba108c71ccaad_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-03_569574959e3f0ad01baba108c71ccaad_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-03_569574959e3f0ad01baba108c71ccaad_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.9MB
- Sample260803-wsf2favekd
- SHA256 14d879f3bc62f4d78ecb17e76c3ac772ab455b7e31aafbd418535c20d729e48f
- MD5 569574959e3f0ad01baba108c71ccaad
- SHA1 5f7fd8143318fb332a82fcdc64500051fade59e2
- SHA512 857e8b647bdac14ba5cb19603bd8674f892285ba0c376434d74693e87b0ab618bd5eabda737c94cb43ec21c08e789c460bcfb8cbed87b7f1c5db90465b1b0850
- SSDEEP 24576:DZ6i6cMJlCZ+zyuifZe0p4Ek4niOkl/A04szE87JKTvmy0Le5ji0hmxNrM:uRJ3UeW4SkZP4sz9MbBPji0Aj
- TLSH T12C952B16F6788372D073C0B9C5D6AA9AFA72344657308ACB0345C76C2F277D68A3A735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10