4beee444532a1d709053d1f6cf3c34a2b27ddac1790999d3ff6a2fcadbf2a902

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 13:41

Target
2026-08-04_e96c812d16e5e7efa84daed752107e10_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.9MB
Sample260804-qy6ldsysdx
SHA256 4beee444532a1d709053d1f6cf3c34a2b27ddac1790999d3ff6a2fcadbf2a902
MD5 e96c812d16e5e7efa84daed752107e10
SHA1 bb2168708a895596df55f2c2e3bc3feee78c2ba9
SHA512 adf65f43be10ee99b6b724ec98f7c6a318852ad5914102e5978c200d079feee88cb071b8c6920942ef5577857dc7137d73b7af608689505c2be6f088689f30cf
SSDEEP 49152:k56rwPji0AjKJDp5zqJtb2IEeW4SkZP4sz9Mb:hrOjoIzzFfkZc
TLSH
T162E51916F5788772D077C079C5E36A8AF97238455F309ACB0249EB383E276D28E35762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3116	2026-08-04_e96c812d16e5e7efa84daed752107e10_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3116	2026-08-04_e96c812d16e5e7efa84daed752107e10_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_e96c812d16e5e7efa84daed752107e10_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_e96c812d16e5e7efa84daed752107e10_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3116