Analysis
- max time kernel
0s - max time network
4s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/08/2026, 16:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_2bddbb69a6c278b2ecfa651ca8d433e0_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_2bddbb69a6c278b2ecfa651ca8d433e0_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-24_2bddbb69a6c278b2ecfa651ca8d433e0_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-24_2bddbb69a6c278b2ecfa651ca8d433e0_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-24_2bddbb69a6c278b2ecfa651ca8d433e0_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 1.0MB
- Sample260825-t3btcssvfv
- SHA256 a795a2eb4b9871f434572f49ca56db656e334cc0f0479e6922b36b5d4c508c77
- MD5 2bddbb69a6c278b2ecfa651ca8d433e0
- SHA1 b3684eb62d1d83ef56c4793d450e3ef0b21041eb
- SHA512 0dfc2324f2b3b9c005fb7d81249e777ae43e803c1a35f33d140d1187b1e5237a47c052e4702a83294f96be75d0fd3d46d26c2089fb4443d8010b87af82919a99
- SSDEEP 12288:DZ6irWcRGJlFoZFdzyPz5L87p1i1gL5pRTcAkS/3hzN8qE43fm78V:DZ6i6cMJlCZP+zy7p1D5jcAkSYqyE
- TLSH T193356B16F66441B5D073C1B9C9D2AA4AEB7234460B308BCF139987392F277E19E3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10