ad027cf3a47ffcf835cf699be49c98e709969619a6bb096db48d9275a491db11

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 22:08

Target
2026-07-10_aec450c44e6906e288e335739f160085_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
Size 2.2MB
Sample260710-12bwasew31
SHA256 ad027cf3a47ffcf835cf699be49c98e709969619a6bb096db48d9275a491db11
MD5 aec450c44e6906e288e335739f160085
SHA1 68168e51e73ea4de432fb5159e4f726f1468b8f5
SHA512 c9175caf3cf0f989ed425a3dbe23395be372c67ace48326cdca774a05e564bd356966232f4366673a5087596d3d19e0335f84b58c44ae223454607e5ed18b734
SSDEEP 24576:iD5Tvinrm73hBh8H2hnrSN3zH0Le5ji0hmxNrMa5tauKf91K5jcAkSYqyE:k56raRBhTn+Pji0AjP5ta1LQpYq
TLSH
T1CFB50915B6A44B71E077C174C992965EEA723C418F328FCB02819EEDBFA36918D35732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5156	2026-07-10_aec450c44e6906e288e335739f160085_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
5156	2026-07-10_aec450c44e6906e288e335739f160085_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-10_aec450c44e6906e288e335739f160085_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-10_aec450c44e6906e288e335739f160085_amadey_cobalt-strike_hijackloader_icedid_njrat_satacom_vidar.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5156