dada058860e759e7e92d118af748e69e9125c0eb73da7e171aabb09d5ce6bf75

Analysis

max time kernel
149s
max time network
125s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
06/05/2026, 13:26

Target
2026-05-06_3fb189b106c7f79589d2dcb707fa2cb3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 955KB
Sample260506-qpr2msf19j
SHA256 dada058860e759e7e92d118af748e69e9125c0eb73da7e171aabb09d5ce6bf75
MD5 3fb189b106c7f79589d2dcb707fa2cb3
SHA1 e26306b1a7400b31ecc3af739929edd56b257d02
SHA512 32d4c76abe1d835b7493cdcff6184d49cecb1d52a462cb96a2e36fc7ce31085751219c47d5ec7f134160555f1767dbb967fb46237f710ada612702cc71855218
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFGjn4DI7VC9OK9J2JPT/SUxCtnRPF9cCGrI2v:iD3JeU7vinrmc4DROK9ZBnRNhcv
TLSH
T1EA25D2036D4C8A75D0AF7D304D51CBD992267C158E127E9A2ED03E9EFBB25C0B92D272
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4664	2026-05-06_3fb189b106c7f79589d2dcb707fa2cb3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4664	2026-05-06_3fb189b106c7f79589d2dcb707fa2cb3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-06_3fb189b106c7f79589d2dcb707fa2cb3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-06_3fb189b106c7f79589d2dcb707fa2cb3_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4664