Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/08/2026, 17:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_b498fd712a212330eaf0c45a1b979f31_amadey_cobalt-strike_conti_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_b498fd712a212330eaf0c45a1b979f31_amadey_cobalt-strike_conti_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-10_b498fd712a212330eaf0c45a1b979f31_amadey_cobalt-strike_conti_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-10_b498fd712a212330eaf0c45a1b979f31_amadey_cobalt-strike_conti_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-10_b498fd712a212330eaf0c45a1b979f31_amadey_cobalt-strike_conti_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 635KB
- Sample260810-vpnrfadp2s
- SHA256 31e8497d201c502c0e4e48ce4f069de98e536f84de7cce4ce36f8db6253c1369
- MD5 b498fd712a212330eaf0c45a1b979f31
- SHA1 645ef05e2513f0103b7cca208c034d6e276d6e19
- SHA512 7f707628bef13ba97d7e3a029ef9945593d2b56fceb0bacac6c9a3ef0c8056f638a2208ddc795f2dbe1072f08459a727419efdc02069e4da4bf2e5f948b8108a
- SSDEEP 6144:95eKQk2c+D/0vxBzkiLz9unaEWVC9ycr0X4cr0XaTlb4OTQVC9Ra71itQYzNhHyf:DZ+yPz5L8aEFyKUlEi/Ra8t3ZUf
- TLSH T17CD4BF03E7A400F9E16B8234A9F54622EB75BD522B30D6DF235896152F337C0AF3A765
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10