Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/09/2026, 19:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_6c42c17a947571cff67ee6d4eb9c71ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_6c42c17a947571cff67ee6d4eb9c71ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-29_6c42c17a947571cff67ee6d4eb9c71ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-29_6c42c17a947571cff67ee6d4eb9c71ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-29_6c42c17a947571cff67ee6d4eb9c71ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 626KB
- Sample260930-yfrcrazw8p
- SHA256 69651b4d4b4e5263419349dd245c4a24f671d02f18456862a7a7316b58a2cb37
- MD5 6c42c17a947571cff67ee6d4eb9c71ad
- SHA1 74f1a2ab7e70c2f36c1221ff2dac95eedfb35c2a
- SHA512 d6ba3ddff8e763e884fd1ab7e5b2fe992bb03aacd0db98a3349141034d08b26ae2d45d58ff769692e4743d5bb71b26d8e72511b0d477e9db32506129cef01988
- SSDEEP 12288:DZ6irWcRGJlFMD3JeU7vinrmyH/Q0D85:DZ6i6cMJliD5TvinrmyH/Q+85
- TLSH T110D45913A6980FA8D12FC1789A924956E7737C065F2097CF1364AE263F327D0AE39357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10