Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
17/08/2026, 11:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_2ed8c1e15672fde65c673b580df54fbe_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_2ed8c1e15672fde65c673b580df54fbe_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-17_2ed8c1e15672fde65c673b580df54fbe_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-17_2ed8c1e15672fde65c673b580df54fbe_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-17_2ed8c1e15672fde65c673b580df54fbe_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 1.7MB
- Sample260817-nfcjgszthy
- SHA256 468ec85f8879fa3e4197b5a5c029dd80ed0626a4785104debf98d8ceff95d6bc
- MD5 2ed8c1e15672fde65c673b580df54fbe
- SHA1 4a7c2cc0cb1d9937b1db98044a3d13d5e313b028
- SHA512 44df982c592a3abd0a950d515170b452ee0cc6be083e161ad2cd41b1e86f1893e907361f7c9eed5667aa619cf4340305430c21607bef24457cf7666d28d4ec04
- SSDEEP 24576:DZjzyaEFoe/YCD5TvinrmbotF1i+B3aic1YTqMi8CtBd2QHCHmTBW5YCD5Tvinr9:hm56rNqJtb2IE56r9
- TLSH T172853916E6A44FA5D06FC074C9D25656EA333C425F208BDB1354BF293E336D1AA3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10