Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/10/2026, 12:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_5278bb8f13b2a82ff9077594a4c9cd5b_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-02_5278bb8f13b2a82ff9077594a4c9cd5b_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-02_5278bb8f13b2a82ff9077594a4c9cd5b_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-02_5278bb8f13b2a82ff9077594a4c9cd5b_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-02_5278bb8f13b2a82ff9077594a4c9cd5b_amadey_elex_glassworm_hellokitty_icedid_ransomhub_remcos_smoke-loader_vidar.exe
- Size 4.8MB
- Sample261003-pva5msdb88
- SHA256 42a69e78346022f07430940ba66fe7e757c2ced5c21f7c82c078d3e377a2ccaf
- MD5 5278bb8f13b2a82ff9077594a4c9cd5b
- SHA1 f982157dfc48c0428a9cf6c9990b4d636a41feb0
- SHA512 650894ee0bae0e0a4b86467a546635f5055e98127c7217f7446beeb5ef558c6da2fdd653b7a58e55a6063c9c25f5c6544ac4afa7421e3560e2d323248249dd1f
- SSDEEP 98304:kzIus6efPUIdoaxcp8wy5c3trGOlkQ5DUOgJr:khfefPtHxcp9ym3nltDUJr
- TLSH T19736F141B3E256B6C4BF1678887A525AA770BC044315DBFB57C4B9796E333C08E323A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10