Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
19/08/2026, 12:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_0661488e1df579a1478cca86e6634369_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_0661488e1df579a1478cca86e6634369_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-19_0661488e1df579a1478cca86e6634369_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-19_0661488e1df579a1478cca86e6634369_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-19_0661488e1df579a1478cca86e6634369_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.5MB
- Sample260819-n98tsavzhy
- SHA256 76ca4de0c494fd9898ddcb037a769ab8f200791bd3e9021a32074dc8ec8c79f8
- MD5 0661488e1df579a1478cca86e6634369
- SHA1 60362053987ad1bcccc57b88549a7cee0788cbc6
- SHA512 7a4bc14c0c383bc8d6f7c224c729c409449e90a381c0236827ccd35bedb822d4bc3309b85b22aa69c3742686fdee9bc782e02f7a2a6c2edcbc23036732e725d5
- SSDEEP 24576:DZjzyacNVOIpcMJliLzygZe0p4Ek4niOkl/A04szE87JKTvm:h2RJGHeW4SkZP4sz9Mb
- TLSH T142753A16F6B88377D0B2C0B9C5D66A5AFB7234465B308ACB034583282F277D59E3A735
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10