bd44805c3d47cdba584cc961409c1cf01096c12878aa403c3e5ee913bc165251

Analysis

max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/07/2026, 19:10

Target
2026-07-14_35f486792498b01ffdadbc23f3c3a7f7_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.4MB
Sample260714-xvs98aev7w
SHA256 bd44805c3d47cdba584cc961409c1cf01096c12878aa403c3e5ee913bc165251
MD5 35f486792498b01ffdadbc23f3c3a7f7
SHA1 972357c565a2bc17f5c03cd29c7b91981378b79c
SHA512 151c59d008ed57250176850a003b3abe3677c5891eaf59dec3ba82fa6913a13cbfff5a429817759d1db8b0853f358358a7164857f1fb83ec9ef923ac714f8f70
SSDEEP 49152:k56ru56rvqJtb2I0qJtb2I59eW4SkZP4sz9Mb:hrbrvXIhfkZc
TLSH
T13BC5E715F5B88722D0B7D0B9C5D2AA9AFA333C415F308ACB0245AB6C3E376D59536732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5796	2026-07-14_35f486792498b01ffdadbc23f3c3a7f7_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5796	2026-07-14_35f486792498b01ffdadbc23f3c3a7f7_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-14_35f486792498b01ffdadbc23f3c3a7f7_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-14_35f486792498b01ffdadbc23f3c3a7f7_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5796