f433ddc6093b9cd98726404fe5237abc398c744c047d3977b16a39bb1724f4ee

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 15:55

Target
2026-08-04_47543f9486a8646c5a19760e50d6bf6d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.1MB
Sample260804-tc8qeahq7s
SHA256 f433ddc6093b9cd98726404fe5237abc398c744c047d3977b16a39bb1724f4ee
MD5 47543f9486a8646c5a19760e50d6bf6d
SHA1 27a01b8773f999ea59c1b04598400f43cd7886a0
SHA512 49e2b850e0d94fc1f0a8bade312231d3e3ff2c428b0f95940a4d0cda7fec7d9668e1105cd5af5039689c8a06468e8cbbe1e197b39b4f956c224bc2fe0936f75c
SSDEEP 24576:iD5TvinrmF+pV4ruEMD5TvinrmC0Le5ji0hmxNrM:k56rH56rTPji0Aj
TLSH
T12E352916B6684F65D07FC078C5D2569AEA733C425F308BCB0355AE683E376D19A3A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4368	2026-08-04_47543f9486a8646c5a19760e50d6bf6d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4368	2026-08-04_47543f9486a8646c5a19760e50d6bf6d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_47543f9486a8646c5a19760e50d6bf6d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_47543f9486a8646c5a19760e50d6bf6d_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4368