82f47d4e407bf8f683215f3be616489321c45718ed65dfff84636b8ee58fdf9b

Analysis

max time kernel
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/06/2026, 09:44

Target
2026-06-02_d3c00781ddfe3752230e193f9459cb34_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe
Size 3.0MB
Sample260602-lqreaaat21
SHA256 82f47d4e407bf8f683215f3be616489321c45718ed65dfff84636b8ee58fdf9b
MD5 d3c00781ddfe3752230e193f9459cb34
SHA1 1c4d9498e29e259156678c69696eff5e2f545e9d
SHA512 1ea1ba4aa1aac522cca8a82701fb0a4a6fd4c8dd2a3c34623f11587c04baf0668d5d34e3224e9dfc3c472e5c1a1d1b3a15d60bfd1432410c5a38bc742b8c89e0
SSDEEP 49152:k56rn9TI956rdcN+Dzc9OBAXqwyOTdLPji0AjdpYqQIAOj:hrnBrdxzpAawzjo56u
TLSH
T1C7E52815E2A44BA4D07F9078CA929656F6737C450F608BCB1290FE793F336D1A97A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3972	2026-06-02_d3c00781ddfe3752230e193f9459cb34_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe
3972	2026-06-02_d3c00781ddfe3752230e193f9459cb34_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-06-02_d3c00781ddfe3752230e193f9459cb34_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-02_d3c00781ddfe3752230e193f9459cb34_amadey_cobalt-strike_hijackloader_icedid_satacom_stealc_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3972