86458d964a91ccf784325333dcf0f57f1830f225868fc69d744dcc3ce5a6b73f

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/08/2026, 15:16

Target
2026-08-05_da36a12f195abae52912dde6fd9bd0d6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.2MB
Sample260805-snfckaar7v
SHA256 86458d964a91ccf784325333dcf0f57f1830f225868fc69d744dcc3ce5a6b73f
MD5 da36a12f195abae52912dde6fd9bd0d6
SHA1 47e8a13633b08f764d17bfe5f65960f84f28c5a9
SHA512 68cbaaf7e9b3a7e93e441665ffa1ff41fce0b5c048600d1c31444c2ee9a60c0d9cf520f40f91998dd77bf7c1fff9b1ce25e61b823515692a1180dfa5186da841
SSDEEP 24576:iD5TvinrmbvFqD5TvinrmULdYTqMi8CtBd2QHCHmTBW5:k56rf56ruqJtb2I
TLSH
T128450815B1A88F65D07FD074C9D2969AEA333C424F208BDB0285BF293E376D59936723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4352	2026-08-05_da36a12f195abae52912dde6fd9bd0d6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4352	2026-08-05_da36a12f195abae52912dde6fd9bd0d6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-05_da36a12f195abae52912dde6fd9bd0d6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-05_da36a12f195abae52912dde6fd9bd0d6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4352