Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/10/2026, 19:55
Behavioral task
behavioral1
Sample
2026-10-30_c7757b5abfc95438a66fac462a4257be_cobalt-strike_redline-stealer_rhadamanthys_satacom_smoke-loader_tofsee.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-30_c7757b5abfc95438a66fac462a4257be_cobalt-strike_redline-stealer_rhadamanthys_satacom_smoke-loader_tofsee.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-10-30_c7757b5abfc95438a66fac462a4257be_cobalt-strike_redline-stealer_rhadamanthys_satacom_smoke-loader_tofsee.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-10-30_c7757b5abfc95438a66fac462a4257be_cobalt-strike_redline-stealer_rhadamanthys_satacom_smoke-loader_tofsee.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-10-30_c7757b5abfc95438a66fac462a4257be_cobalt-strike_redline-stealer_rhadamanthys_satacom_smoke-loader_tofsee.exe
- Size 1.2MB
- Sample261031-ynf7raztgz
- SHA256 06d47b84919e421c3ac5e72c3d6dc8db3448f9931091e6870114fbea2b4974b9
- MD5 c7757b5abfc95438a66fac462a4257be
- SHA1 eef5fca106766b733bf304b60f47c4a6be8ffbc6
- SHA512 88e542f6244ba2b68c62e4a865cbd744682cfdc67c5e836c7f47476a244613ad23a1e2492f4dc5c76b44988469f9e6bceca8d3448206bc7c44059f48b08e6afd
- SSDEEP 12288:aEmmR4BVL6bi9I6VWsmfaVzzA8eEmmR4BVL6bi9I6VnsmfaVO:aEozIyWdaVzzApEozIyndaVO
- TLSH T16A45E51233F89424F2F76BB45E7697A1AA33FD265D71C24E2240701E2E727908E61B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10