d9d14fa658a0512c834fa89661a105b102ffe61f30a2f1248a870b9a8215bdae

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260630-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260630-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 18:13

Target
2026-07-01_e2f4fc66cd7b98bbf96e9f952727ee9f_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
Size 1.7MB
Sample260701-wt45naby2j
SHA256 d9d14fa658a0512c834fa89661a105b102ffe61f30a2f1248a870b9a8215bdae
MD5 e2f4fc66cd7b98bbf96e9f952727ee9f
SHA1 c067937d58ea85dc4e088a20e180c3317b41dd42
SHA512 2bbe861b4187550c846dfdf6b1942ede3e48ba6a4a8d0e38d8f1849e6edc61500fb617b22150a9b8caae7f0d0ba1cadafff6b4322a7fc33b4d2d3351458e4541
SSDEEP 24576:iD5Tvinrmfy6i1zuxw7ljsarakkqt4nUw3wiDIiukOiFOPfepJ12eCtsO8e7zYK:k56ruy6i1zuajsauZnJrgA2eQJ
TLSH
T14385291963EC0AA4E1BB9638CA614556E673BC211F3197CF12509A7D3F33AD09D39B23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2580	2026-07-01_e2f4fc66cd7b98bbf96e9f952727ee9f_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
2580	2026-07-01_e2f4fc66cd7b98bbf96e9f952727ee9f_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-01_e2f4fc66cd7b98bbf96e9f952727ee9f_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-01_e2f4fc66cd7b98bbf96e9f952727ee9f_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2580