Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/09/2026, 22:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_36ab80751f614e19e19c4c1e2ac4e4a2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_36ab80751f614e19e19c4c1e2ac4e4a2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-29_36ab80751f614e19e19c4c1e2ac4e4a2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-29_36ab80751f614e19e19c4c1e2ac4e4a2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-29_36ab80751f614e19e19c4c1e2ac4e4a2_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 1.8MB
- Sample260930-14bcjsbe83
- SHA256 80ba6a8c3d686e1ec354c69dd5256e5fb7aa4f3d1f0c20ecfa7aaf5783f8cb4c
- MD5 36ab80751f614e19e19c4c1e2ac4e4a2
- SHA1 aaf1cf3afee00c592630aa6399b7963df9e75329
- SHA512 c71b1953cb151b3befc7d5c45b8e5a25f0e32694b30fb516dc1bb8c66ef9fa60c2dd4909d7b205ecec4f9c9417934507f85cf7cb101c7b4f810b9613fd7a6173
- SSDEEP 24576:DZ6iLa5D5TvinrmdCKaEBiXKapwe5jcAkSYqyEoD5TvinrmAYTqMi8CtBd2QHCH1:e56rPpYq+56r+qJtb2I
- TLSH T198951816F6648F65D07FC079C5D2969AEA733C425F308BCB1345AE283E276D1993A323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10