Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/08/2026, 14:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_fb0872f5ed04e2975dcb72dfe7c7bf0e_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_fb0872f5ed04e2975dcb72dfe7c7bf0e_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-23_fb0872f5ed04e2975dcb72dfe7c7bf0e_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-23_fb0872f5ed04e2975dcb72dfe7c7bf0e_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-23_fb0872f5ed04e2975dcb72dfe7c7bf0e_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 869KB
- Sample260823-ryp43sae69
- SHA256 654c2e23f0da738eaf7afa5001ebe5578dbbfe1ef24c0ac855434587d83bc517
- MD5 fb0872f5ed04e2975dcb72dfe7c7bf0e
- SHA1 300ab4e32654712054cade86d89fc2d3bbd06511
- SHA512 409e9b130c8f8e6f6a0d6d2a4249f112c1e7fcd219a8f66af1d0a3a2f1901ca2d569745632881b669656d8005fbbdd01e0866ed55a73a62afc43c54b23123daa
- SSDEEP 12288:DZ+yPz5L8aEFyKUlDyPz5L8AZYaQPp1/B29g:DZjzyaEFyKUluzyAZYaQPp1/B29g
- TLSH T19915AF03E7A410F5E52A8634E9E50612EB75BD671B60C7DF236842252F237C0AF3A7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10