b8a83e8a070eae3c3b7d144568a4c1d05b697b9fdee65b7461b649a6ffa6c1e4

Analysis

max time kernel
148s
max time network
139s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 21:12

Target
2026-08-02_d055302fef39ae101d7e9786daa54ed4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 565KB
Sample260802-z2askafr2v
SHA256 b8a83e8a070eae3c3b7d144568a4c1d05b697b9fdee65b7461b649a6ffa6c1e4
MD5 d055302fef39ae101d7e9786daa54ed4
SHA1 6b060d7fea42a7100855875ba2361017a2f8b2e1
SHA512 2c941197171829aace775f0f00484d63d68df40d0785973ed2e50355e1c2b69c45366fedbadf1c8b41edaf2c1f81c86425996f12adb985f9c0272d30637ce0c3
SSDEEP 12288:iD3JeU7vinrm5FaDapcREEMD3JeU7vinrmC:iD5Tvinrm5FaDapcREEMD5TvinrmC
TLSH
T1F0C44B1676984FA5E26F9174D9A245A6E7737C129F108BCF03607E393F326C0AE39253
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1912	2026-08-02_d055302fef39ae101d7e9786daa54ed4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1912	2026-08-02_d055302fef39ae101d7e9786daa54ed4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-02_d055302fef39ae101d7e9786daa54ed4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-02_d055302fef39ae101d7e9786daa54ed4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1912