1b1de8059cb61c9c866c06d2a2d914be6186ee4b75e5b0ab3f7c9753af5645ff

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 20:53

Target
2026-08-01_6b267aebcfc5c380ac3b56ab4b00a213_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 726KB
Sample260801-zps4dagg77
SHA256 1b1de8059cb61c9c866c06d2a2d914be6186ee4b75e5b0ab3f7c9753af5645ff
MD5 6b267aebcfc5c380ac3b56ab4b00a213
SHA1 4cdca527fc4c1a37d4a2ab8cdffe642eb2ee26a7
SHA512 e76abbafafb24efd38a6e18e7bb2473eb9190827283dc7f6ffe8f7a90dfbb393b112da544843574fa4156eecd31138e793d89b8152ac13f4c34aa75d30989841
SSDEEP 12288:iD3JeU7vinrmdoTpYagPR0XxKeD3JeU7vinrmgF:iD5TvinrmdoTpYagPRmxKeD5TvinrmgF
TLSH
T1B1F44902A1984F95D65F8130DC9646A6E6737D829F118BEF1364BF393E323C0BA39257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2776	2026-08-01_6b267aebcfc5c380ac3b56ab4b00a213_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2776	2026-08-01_6b267aebcfc5c380ac3b56ab4b00a213_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-01_6b267aebcfc5c380ac3b56ab4b00a213_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-01_6b267aebcfc5c380ac3b56ab4b00a213_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2776