Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/11/2026, 23:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_3a29c41c9ed9f3cd96d167d7e0b90327_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_3a29c41c9ed9f3cd96d167d7e0b90327_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-11-03_3a29c41c9ed9f3cd96d167d7e0b90327_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-11-03_3a29c41c9ed9f3cd96d167d7e0b90327_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-11-03_3a29c41c9ed9f3cd96d167d7e0b90327_amadey_cobalt-strike_hijackloader_icedid_njrat_ryuk_satacom_vidar_wannacry.exe
- Size 1.3MB
- Sample261104-3fkmesvzhs
- SHA256 5d1e1562b9d15506f0a7755777c2894b8248d12797532817335af362c3804019
- MD5 3a29c41c9ed9f3cd96d167d7e0b90327
- SHA1 2fa37da013ae9fa28219dd0077353463c15a05c3
- SHA512 5f8bb97dae3b26ceed7a25a634e24a05a0620113d9fcb8fe1587bea05ec06b3b33395337bbac612f13c6accc4874fcf89ef555d4097c8aeabd40d515e367977d
- SSDEEP 24576:DZjzyaEFo3+aWiauRaRaBQDZagCHD4ycB0Le5ji0hmxNrM:hCPji0Aj
- TLSH T1E5557C17FAB446B5E037C175C9E2568AEE7138825B30CACB1359C7282F237D19A3A771
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10