Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 03:47
Behavioral task
behavioral1
Sample
2026-11-01_ef6e1cae8c4578cac401f105a0f4f36b_cobalt-strike_elex_icedid_neshta_ransomhub.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_ef6e1cae8c4578cac401f105a0f4f36b_cobalt-strike_elex_icedid_neshta_ransomhub.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-11-01_ef6e1cae8c4578cac401f105a0f4f36b_cobalt-strike_elex_icedid_neshta_ransomhub.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-11-01_ef6e1cae8c4578cac401f105a0f4f36b_cobalt-strike_elex_icedid_neshta_ransomhub.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-11-01_ef6e1cae8c4578cac401f105a0f4f36b_cobalt-strike_elex_icedid_neshta_ransomhub.exe
- Size 155KB
- Sample261102-ecgjlast9j
- SHA256 43beff2673fa937763be76d9e61f0ab159803de472027329b184cf27ba18e6fb
- MD5 ef6e1cae8c4578cac401f105a0f4f36b
- SHA1 cf14948d04569ff1062e4070a308c31e5518ac90
- SHA512 b72a06736402365079e56d144bf40dbb8507ff3ba8af50999c35b6c7271f96bb50d9973df4056cc9a86dfd4271f63c1fb6b734bbdf58cf5ac1e7dd409b0c17d1
- SSDEEP 3072:zr8YCkefXNEbZrbwwvNLFJmQMA++++YvR0So9TxpGAhWLXyG:PsNfXNEbBpNqA++++YmbLGlLXP
- TLSH T1DAF37C57B2E530F9E1734AB8C8118A54EB37B8711B20AFEF07A4065A1E277C19D3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10