Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 17:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_544971d9145f2d71bcaf08c21816b105_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_544971d9145f2d71bcaf08c21816b105_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-26_544971d9145f2d71bcaf08c21816b105_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-26_544971d9145f2d71bcaf08c21816b105_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-10-26_544971d9145f2d71bcaf08c21816b105_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 1.1MB
- Sample261027-vtp53aey3t
- SHA256 aef982fb617c0763be303f9169fd5c0e28daad7f2f07d085689c427eb425a9dd
- MD5 544971d9145f2d71bcaf08c21816b105
- SHA1 8de7bdc38952b6c082df93ed7c8d19e712faca1c
- SHA512 893691e83741d0fb8262282f89917ec5f0757fa34f4eb4b5929095999acaed8f290838825bd02e5af24b41393a2af9dfe452091c014ccc27ce9a548e9c431ad8
- SSDEEP 24576:DZjzyaEFyKUlEi/RaoFMD5TvinrmVD5TvinrmbkD:hjKB56ru56r5
- TLSH T18435E406E6980FA5D16F8134DBA14552B6737C125FE097CB12D0FE3E3F32680AAE9653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10