Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/10/2026, 17:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-13_289cd992d2faac372966a3a8164c4a2f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_289cd992d2faac372966a3a8164c4a2f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-13_289cd992d2faac372966a3a8164c4a2f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-13_289cd992d2faac372966a3a8164c4a2f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-10-13_289cd992d2faac372966a3a8164c4a2f_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 1.3MB
- Sample261015-v1rbpsav8x
- SHA256 43c26e3a8341d794ced2bd460b64394de5c201dac5f49b62e19e21b10ea62b7a
- MD5 289cd992d2faac372966a3a8164c4a2f
- SHA1 c5e64a5cfc887fea0cbe1725b499d4318cbe3435
- SHA512 c3ba5707621dea86c79755ebd20fc0b7d94944af4205d38b3d606fab9edf0e91fe6158d59ae74b6814b73146535d765edb1a36c8667664728889139171b90d20
- SSDEEP 24576:DZjzyaEFyKUJqogiYiKjEsa5/JblZ0Le5ji0hmxNrM:hjK8Pji0Aj
- TLSH T1FE557C16FAB44675E037C175C9E2964AEE7139822B30CACF1359C3282F637D19A3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10