Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
01/10/2026, 18:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_18345bd2658c90c0b917ba68f82c6503_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_18345bd2658c90c0b917ba68f82c6503_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-09-30_18345bd2658c90c0b917ba68f82c6503_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-09-30_18345bd2658c90c0b917ba68f82c6503_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-09-30_18345bd2658c90c0b917ba68f82c6503_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 599KB
- Sample261001-wsdlbatfre
- SHA256 d22d81d960cf172d2b9348d41725befc766e6a6ca8404aebde02aef18a94f75b
- MD5 18345bd2658c90c0b917ba68f82c6503
- SHA1 f3adb71b0d4e95ad88e1f4b1a32d0d808967ac34
- SHA512 3e294ae7c7cde19c846bd250c590adcb02d38a3f47149179a9bcd3a16be9b2dc81faabda472345d88a052204fbab28d00817a280c75e6aae2d43ac6784072dd4
- SSDEEP 6144:95eKQkB4p4rWTSIoXNHnr1GJOl4uvjgddF1iOWTSIoXNHnr1GJOl4uvjgddFCxDR:DZ6irWcRGJlF8OWcRGJlFaDaEpFKl+
- TLSH T140D49E03F6A800E8E15AC63896E64A03EB767C565B6097CF136486162F737D0AF3D3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10