b43bb286f43b17a16ecbb3204f3379a77484b61969c0c2992d2f81522b31cef2

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 03:29

Target
2026-08-03_0cd607d6ec64082336dcaf49b176711c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.9MB
Sample260804-d2cq9scc73
SHA256 b43bb286f43b17a16ecbb3204f3379a77484b61969c0c2992d2f81522b31cef2
MD5 0cd607d6ec64082336dcaf49b176711c
SHA1 be0ff53e636a4ab90d338a340482c0af140400b0
SHA512 9dc62e3253b8d6bd48bb098a511e422e958fe3f9eb44d45f1f6a3c392382b123dc29f1434cdfaf4258f6c36d18288c4f6969185b24d95e6cc0ef94a1d1d5fcf3
SSDEEP 24576:iD5TvinrmF+pC5jcAkSYqyEgEm8JsZwhB0Le5ji0hmxNrM:k56r8pYqw8pPji0Aj
TLSH
T19D95E71DFE644F65D0678074C992975EEA323C410F209BCB1285BB68FE33F95993A722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2396	2026-08-03_0cd607d6ec64082336dcaf49b176711c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2396	2026-08-03_0cd607d6ec64082336dcaf49b176711c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_0cd607d6ec64082336dcaf49b176711c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_0cd607d6ec64082336dcaf49b176711c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2396