Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/08/2026, 02:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_c115ce73d79fc8ee4b8d0b359c77b193_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_c115ce73d79fc8ee4b8d0b359c77b193_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-24_c115ce73d79fc8ee4b8d0b359c77b193_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-24_c115ce73d79fc8ee4b8d0b359c77b193_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-24_c115ce73d79fc8ee4b8d0b359c77b193_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.5MB
- Sample260825-ckbbfa1zct
- SHA256 a4dcc5f72aabe8d4767ba63d2c7936886e07329ef3ad032b1740b55f4fa1607c
- MD5 c115ce73d79fc8ee4b8d0b359c77b193
- SHA1 8363c40cd2348e4d553a4f39c08ea0b3973bbd1d
- SHA512 ddfe2679458a7c2c925952fe2ff8470670cd139bdd524455d7522f84f635a9eae8512f8e670dc5f1f17f84c19ef0bd4e382c133003c598e440ec47788bef510a
- SSDEEP 24576:DZ6i6cMJlancMJlPoB3aERaVqGY3mnXoZ643mnXoZ6i6cMJlancMJlPoB3aERaVh:uRJARJC3k03kHRJARJT
- TLSH T1D3759E03F79800E8E25AC1789AA69A13EB767C56173097CF136486162F73BD0AF3D395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10