79706073d765e27e38645bba675797d4fc0a1b6d93253744bbbfb4bc54f075f1

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 11:44

Target
2026-08-03_6914935e376f5e4ba072f65f415acb62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.8MB
Sample260803-nwd29agh39
SHA256 79706073d765e27e38645bba675797d4fc0a1b6d93253744bbbfb4bc54f075f1
MD5 6914935e376f5e4ba072f65f415acb62
SHA1 80c1796f0f52a8336b1aca52207920ce646c9755
SHA512 6f773f7659d2673fd1fdc5fe442e8db8c927f8e28fac8aed0cdfd43750086b3246b5744be13ea37a0df5f37e2e1b67141b449adc8b2f6b6d5146bcf44d397b1e
SSDEEP 24576:iD5Tvinrm5FaCayaEMD5TvinrmVD5TvinrmVD5TvinrmGZe0p4Ek4niOkl/A04s+:k56r956ru56ru56rbeW4SkZP4sz9Mbd
TLSH
T14D95F615B1A88F62D0BFD079C9925A9AFA333C454F208BCB0245BF293E376D19935727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2548	2026-08-03_6914935e376f5e4ba072f65f415acb62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2548	2026-08-03_6914935e376f5e4ba072f65f415acb62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_6914935e376f5e4ba072f65f415acb62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_6914935e376f5e4ba072f65f415acb62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2548