00fd9f93eb90e30124fac9d673f29ace909aec38c3d005f31fd380756b624804

Analysis

max time kernel
149s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 16:06

Target
2026-05-29_7211ed4de3fba005d0de5dcafc2789a1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 644KB
Sample260529-tkfplagt5t
SHA256 00fd9f93eb90e30124fac9d673f29ace909aec38c3d005f31fd380756b624804
MD5 7211ed4de3fba005d0de5dcafc2789a1
SHA1 d7e0afdf3d09ee943a5def3c0fffdcda82080fdb
SHA512 299a6d2dc2861e04b2958c779ffe9c821ec728c043e586cd4f6713b607451b9580ad43c17ff6b423d1de9c16a6eb9726e3fb882dc319b6c52853cc04afa49434
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFl/skDNsjPYH+ymZdsjYB2MeG8i6qIwn9ATuZlVC9:iD3JeU7vinrmHDkV1qloCx2MV7IP+
TLSH
T141E4E50266594FA9D1AFD17896824562F6737C090F20ABCF03907F363E667D0AF39A53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3308	2026-05-29_7211ed4de3fba005d0de5dcafc2789a1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3308	2026-05-29_7211ed4de3fba005d0de5dcafc2789a1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_7211ed4de3fba005d0de5dcafc2789a1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_7211ed4de3fba005d0de5dcafc2789a1_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3308