f1b242033e8bbb64562c86907534e1c74361c7439e30ec46bbd7cf1b5f2cb7f3

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 16:57

Target
2026-07-31_ba8544717c546d5dcffc2242dcb1bb5b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.2MB
Sample260731-vglbcacl2w
SHA256 f1b242033e8bbb64562c86907534e1c74361c7439e30ec46bbd7cf1b5f2cb7f3
MD5 ba8544717c546d5dcffc2242dcb1bb5b
SHA1 7cc9bcf44d40e02078f8b3013291dc4aa6986def
SHA512 3fddea9eef0aa62fde348d714b2627fca9f7b50a35fda69fd95df98692d06e92a26f5b21a5a2bde9da45becca06d0dd041e3206b43e068973edfab3afe820fba
SSDEEP 49152:k56rZeW4SkZP4sz9MbmeW4SkZP4sz9Mb:hrtfkZc+fkZc
TLSH
T1F3B5E515F1788722D0BBC0B9C6D6AA99FA3338455F708ACB0285D73C2F276D5867532B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6012	2026-07-31_ba8544717c546d5dcffc2242dcb1bb5b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
6012	2026-07-31_ba8544717c546d5dcffc2242dcb1bb5b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-31_ba8544717c546d5dcffc2242dcb1bb5b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-31_ba8544717c546d5dcffc2242dcb1bb5b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:6012