Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
18/08/2026, 15:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_3c5912b237ded80c24cb0f4ee4167403_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_3c5912b237ded80c24cb0f4ee4167403_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-18_3c5912b237ded80c24cb0f4ee4167403_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-18_3c5912b237ded80c24cb0f4ee4167403_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-18_3c5912b237ded80c24cb0f4ee4167403_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 658KB
- Sample260818-slbxcsvcmc
- SHA256 5bd1440de491c23a8dfec4922fc95d49e69cb73bbd590881d8cdb4465170fafd
- MD5 3c5912b237ded80c24cb0f4ee4167403
- SHA1 ef7b5d1ef39bd049886e2efa53590e06d20ee314
- SHA512 3633f3eb58b4a2bf7b0de32d54d4bb0e3c69e546976d32fbeb976723b87dc119d723e218faee083922a471afb07e32e507528c9175f0235c197cb9e9cb3b05d7
- SSDEEP 12288:DZ6irWcRGJlFsazgpE2D3JeU7vinrmdu:DZ6i6cMJlaazgpE2D5Tvinrmdu
- TLSH T146E45913A6980FA8D11FC1789A924A56E7737C065F2097CF1354AE263F727C0AE39397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10