Analysis
- max time kernel
0s - max time network
4s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/08/2026, 15:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_bff373cdd8011dbdc38291e8b5fb2af1_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_bff373cdd8011dbdc38291e8b5fb2af1_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-07_bff373cdd8011dbdc38291e8b5fb2af1_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-07_bff373cdd8011dbdc38291e8b5fb2af1_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-07_bff373cdd8011dbdc38291e8b5fb2af1_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 666KB
- Sample260807-styfbsybkd
- SHA256 29e471458562820f5d22e89d62370eacd564d1f2c0f1befdfda552b0d4f549eb
- MD5 bff373cdd8011dbdc38291e8b5fb2af1
- SHA1 b4b4151d1150bdab9080b988b6065ee3df87281b
- SHA512 dbe236ea505f457fa0c4fd21cf210ce8bb20d1befed10c67d24a16a4a5b58c3924c71ede32f6215ca08d46529803adc36f7a5e679fa9eb485d941e4a79604ffb
- SSDEEP 6144:95eKQkB4p4rWTSIoXNHnr1GJOl4uvjgddFjE8EMiSVC9/VC93c+D/0vxBzkiLz9o:DZ6irWcRGJlFoN55EhyPz5L8lEEdUhC
- TLSH T128E4AE03E7A410F9E11AC23499E64A02E7767C665B60DBCF136446262F737C0AF3E7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10