Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/10/2026, 23:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_b5114f3fb17768bf8ab8f8d0af6b13c3_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_b5114f3fb17768bf8ab8f8d0af6b13c3_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-22_b5114f3fb17768bf8ab8f8d0af6b13c3_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-22_b5114f3fb17768bf8ab8f8d0af6b13c3_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-10-22_b5114f3fb17768bf8ab8f8d0af6b13c3_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 845KB
- Sample261023-3rewbadh35
- SHA256 ba658ad2899fe85a822dd977a8a1acdbbf2e1546b8e21e529a256eaedaa9e6c5
- MD5 b5114f3fb17768bf8ab8f8d0af6b13c3
- SHA1 1d49210317e1eabf122d2d5fa092f016fdbb9d1c
- SHA512 0ca2d0877aa2ba710121c17532f060abf7448fa34a2dd65aa7d6dd2f5d61dc44161cb4101bfc92f413969e459ad9928777c15a5effab6b0badf56eb92cbce597
- SSDEEP 12288:DZ+yPz5L8aEFyKUlDyPz5L8AZYahXvMas00zw:DZjzyaEFyKUluzyAZYahXvMas0qw
- TLSH T12005AF03E7A410F9E52A8634D9E54612EB75BD621B60C7DF236842252F237C0AF3A7B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10