38e7613fbf2bdef47aa5bf62a3575ac27c1b6370db300141b3587ab53005824b

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
03/08/2026, 14:34

Target
2026-08-03_6bc2a6e0d763104086dd3dc2d56a9128_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.9MB
Sample260803-rxea7aszhw
SHA256 38e7613fbf2bdef47aa5bf62a3575ac27c1b6370db300141b3587ab53005824b
MD5 6bc2a6e0d763104086dd3dc2d56a9128
SHA1 b195d56bd87b0f71439e6e8e75fce0fc05b4322a
SHA512 5335b0654bd9e45b78c26405f8f84e3a331662480acacfc9eb409ce4b01863da0efa6c25cff6bd2cdb276d60a6eae5a3dc59a997a08979d217e16a777d2a7980
SSDEEP 24576:iD5Tvinrm5FaCayaEMD5TvinrmVD5TvinrmVD5TvinrmGZe0p4Ek4niOkl/A04sl:k56r956ru56ru56rbeW4SkZP4sz9MbS
TLSH
T13895F716B2788F62D0BFC079C5925A9AFA733C055F208BCB0245AF293E376D19935727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4624	2026-08-03_6bc2a6e0d763104086dd3dc2d56a9128_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4624	2026-08-03_6bc2a6e0d763104086dd3dc2d56a9128_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_6bc2a6e0d763104086dd3dc2d56a9128_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_6bc2a6e0d763104086dd3dc2d56a9128_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4624