Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 10:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_3e602a8ce00adc863f12d8ac843077ef_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_3e602a8ce00adc863f12d8ac843077ef_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-07_3e602a8ce00adc863f12d8ac843077ef_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-07_3e602a8ce00adc863f12d8ac843077ef_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-07_3e602a8ce00adc863f12d8ac843077ef_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
- Size 4.8MB
- Sample260807-mbdqbasfpe
- SHA256 d7934bc02bf65ffce23d116a3a7a8ee8c5e8bb786082542d119de5f2ab474b38
- MD5 3e602a8ce00adc863f12d8ac843077ef
- SHA1 34eac8aa74506201f8de7ad9fa210858c4388bac
- SHA512 ffebe6d7bfd36588bc3237cfa93a6789a9106a23b0ea6f1f5e79e9d33948108e45e754b784f637e2cb4a25da108f54e4b7676d80af37c4c1360614779e996b14
- SSDEEP 98304:QzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJv:QhfefPtHxcp9ym3nltDUJv
- TLSH T1D936F141B3E256B6C4BF1678887A525AA770BC044315DBFB57C4B9796E333C08E323A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10