c7c226cc87b34dc6f1aeee2aed1a16416ce54ae88a980467c53785248f694cd4

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 17:42

Target
2026-08-04_e797610a41824f2831fd1aac0ceb940b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.6MB
Sample260804-v9zpfaar9x
SHA256 c7c226cc87b34dc6f1aeee2aed1a16416ce54ae88a980467c53785248f694cd4
MD5 e797610a41824f2831fd1aac0ceb940b
SHA1 1f30033d670c304e2887980410b79f9f80309b52
SHA512 b5015bd0e2b1289967e59ead9acc5f70bfb564c3bf0636b2888b59fcd308cde87521de5d000a1e0fa9c906aa7617eb62df008e8e00dea6eb4267cc8f2bd1fc80
SSDEEP 24576:iD5TvinrmF+pijYTqMi8CtBd2QHCHmTBW5MkUI5jcAkSYqyE:k56rfqJtb2IapYq
TLSH
T1B875C315E6648B65D06F8079C792968AFA333C414FE087CB12C5EA7C2F276D189F6723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2272	2026-08-04_e797610a41824f2831fd1aac0ceb940b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
2272	2026-08-04_e797610a41824f2831fd1aac0ceb940b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-04_e797610a41824f2831fd1aac0ceb940b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-04_e797610a41824f2831fd1aac0ceb940b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2272