Analysis
- max time kernel
0s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/10/2026, 12:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-30_fffadfa2cb48184aacd0db68e35384b3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_fffadfa2cb48184aacd0db68e35384b3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-10-30_fffadfa2cb48184aacd0db68e35384b3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-30_fffadfa2cb48184aacd0db68e35384b3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-10-30_fffadfa2cb48184aacd0db68e35384b3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
- Size 3.7MB
- Sample261030-n6asksed63
- SHA256 c20a858e94a1958c188325bd096859f8da9e228ebc069c69f994346c0bd6895e
- MD5 fffadfa2cb48184aacd0db68e35384b3
- SHA1 1cd35937a0d65a1200d64436eada00b07601d2cf
- SHA512 33aa2306929d9957195a00fc53f4adc086c9fb6a3f782dc93295eb289227238adcd82e9e3c6d8b428c558b73cc00d2275cc31c611008162f8a66c1c517ebb930
- SSDEEP 49152:u4U2v+WeW4SkZP4sz9MbreW4SkZP4sz9MbdiV56r0Pji0Aj:D/v5fkZcrfkZcdiWrSjo
- TLSH T18D061756F7788F32F0B6C075C9C6A669F9323C450BA14AC7024EBB286E376C585F5326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10