Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
11/10/2026, 12:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-10_654b25ad4972d5ff8a1ded5b6c11152c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_654b25ad4972d5ff8a1ded5b6c11152c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-10_654b25ad4972d5ff8a1ded5b6c11152c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-10_654b25ad4972d5ff8a1ded5b6c11152c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-10_654b25ad4972d5ff8a1ded5b6c11152c_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar.exe
- Size 2.2MB
- Sample261011-pp7xes1why
- SHA256 0442dfdac9526606ab416a203096b78608077f5559e3fa3cbbe72c5433fd1215
- MD5 654b25ad4972d5ff8a1ded5b6c11152c
- SHA1 e8c13ec20262c108066b7035c90bc7c6b9d2b746
- SHA512 d86a2d6acfed6c05ea3ec8a3cf5645bbfb05991ee9ba47cceb2519f3b605981bd045cdef333c6bd12429f39356f44dcbcd416d7dd2afb6ecc4e04a073b617588
- SSDEEP 24576:DZjzyaEzD5TvinrmkzywFqRFmov5jcAkSYqyEoD5TvinrmVD5TvinrmC0Le5ji0v:h456r9YpYq+56ru56rTPji0Aj
- TLSH T1F3B52916B6644FA5D06FC078C5D2569AEA733C424F3087CB0395AE293F376D19A3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10