Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
05/08/2026, 21:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_1647787f2ad1a3a8448b453ae5ead40a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_1647787f2ad1a3a8448b453ae5ead40a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-05_1647787f2ad1a3a8448b453ae5ead40a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-05_1647787f2ad1a3a8448b453ae5ead40a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-05_1647787f2ad1a3a8448b453ae5ead40a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.7MB
- Sample260805-1kf4pasvft
- SHA256 59765217f90760c58d7e6db88bfc42bd2bf0c4f5b4bcd623918df83c6ae333ff
- MD5 1647787f2ad1a3a8448b453ae5ead40a
- SHA1 8d6ba88a8b236a1199c97fc511c060ce5ea6022f
- SHA512 3901f61ce289cbc73eb324ca950bc322cf7f672d584a49daef983995b8e0e6acff702c9b541717a33e48f1ab783756ef87a0095204fa6cf97b3465237907e372
- SSDEEP 24576:DZ6ia4U2E+mRP3g+Ebv5jcAkSYqyEoD5Tvinrmh5jcAkSYqyE:u4U2v+KpYq+56rapYq
- TLSH T112856B16F6648B71D077C079CAC2A69AEA7338454F3087CB13859B287F376D29A35723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10