7303440b85b66b0b14a10fcf7ece364df83d5a1642c01c610a8d8d55cef9abdd

Analysis

max time kernel
149s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 09:37

Target
2026-06-02_c09ebf956de0f8079679b065260dae10_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe
Size 2.8MB
Sample260602-llyb2abt5k
SHA256 7303440b85b66b0b14a10fcf7ece364df83d5a1642c01c610a8d8d55cef9abdd
MD5 c09ebf956de0f8079679b065260dae10
SHA1 f86310ac0c7a92da2d45cffcba5ea9bc030dc5cc
SHA512 d652dc8011ae0e593ab10d7cecbef9f967fd240c36df8d30c19bd782b97b5aacce163142d0abd457f85397024abfb05b00ed142806e56b44f46fbea9a847f7c8
SSDEEP 49152:k56rn9TI956rdcN+Dzc9OBAXqwyOTdLPji0AjdpYq+T:hrnBrdxzpAawzjo56/T
TLSH
T1DBD50715E2644BB5D06F8074CA92565AFA733C418F624FCB0290EEBD7FB36919929333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4324	2026-06-02_c09ebf956de0f8079679b065260dae10_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe
4324	2026-06-02_c09ebf956de0f8079679b065260dae10_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-02_c09ebf956de0f8079679b065260dae10_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_c09ebf956de0f8079679b065260dae10_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4324