Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 05:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-24_8644d54d1d3ff8098388a98f31e3e9d5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_8644d54d1d3ff8098388a98f31e3e9d5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-24_8644d54d1d3ff8098388a98f31e3e9d5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-24_8644d54d1d3ff8098388a98f31e3e9d5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-24_8644d54d1d3ff8098388a98f31e3e9d5_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.4MB
- Sample260925-gebr8stwcs
- SHA256 1f402ae017b004f0a8d97d53f6b9b90e08c359e1c44462518d00925f41152260
- MD5 8644d54d1d3ff8098388a98f31e3e9d5
- SHA1 b2fdd823b26033f80127ab1888478866eba05c33
- SHA512 43b93deed7377911ae261fdd37ff6ee99d40ba7630f6e2996c0ed54f04bf1be5b17c96fac8fc023321437b0a7601fcdb300fca7726b30fc13fae2c219aec98f0
- SSDEEP 24576:DZ6iLa5D5TvinrmdoTpYagPRmzHZe0p4Ek4niOkl/A04szE87JKTvm:e56rbeW4SkZP4sz9Mb
- TLSH T128651916F5788B22D0BBC0B9C5D66A99FA333C465F3087CB03459B283E277D5963532A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10