Analysis
- max time kernel
0s - max time network
2s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/10/2026, 12:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_660a55a16b661df8a1aa8ef410b8e389_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_660a55a16b661df8a1aa8ef410b8e389_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-10_660a55a16b661df8a1aa8ef410b8e389_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-10_660a55a16b661df8a1aa8ef410b8e389_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-10_660a55a16b661df8a1aa8ef410b8e389_amadey_cobalt-strike_glassworm_hijackloader_satacom_vidar_wannacry.exe
- Size 1.1MB
- Sample261011-pnlb2at19m
- SHA256 ef010db6b3f535aba640c2873227e40fdcbcabf84853d1772383b0649170698f
- MD5 660a55a16b661df8a1aa8ef410b8e389
- SHA1 efa70ba7f2c89544c269b35d1c4b4778c0f4aba5
- SHA512 18e2171c055ff62861abdb12f078623e2e06da8138580f69f30c9dd2c670951598a0fe4c13f1de271abd7e18df34e6d07b3b57fe4fadbd4eb4d3829584127b76
- SSDEEP 24576:/1flT/Vk3HYwLfUwaoEaahh5jcAkSYqyE:/nTkLfUPpYq
- TLSH T1E9454A26EA648AA2D0B3C478CAD29746EB323C910B3087DB9295F3695F337D19D35731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10