6ae5ee66dc8e2dd4435b6db0b80cdf4adc79c713771e26010512a93303a9976f

Analysis

max time kernel
150s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 15:23

Target
2026-08-06_6ef050e8646aea6bd3a91abb5d336664_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.0MB
Sample260806-sse8csaf59
SHA256 6ae5ee66dc8e2dd4435b6db0b80cdf4adc79c713771e26010512a93303a9976f
MD5 6ef050e8646aea6bd3a91abb5d336664
SHA1 27f16c6a6ee4a2fc3a9613dac3058f59fb58364b
SHA512 26e297c1ba53c9e3bbc73df596d3a8f59616d256fabd0a42f8bf0c6ca27f80981db6ce4b87c93ddef416d0ed9cd911b173de8ca6b7f0afb3f2f3412df99b6250
SSDEEP 24576:iD5TvinrmF+pV4ruFZe0p4Ek4niOkl/A04szE87JKTvmlD5Tvinrm0TYTqMi8Ctt:k56rreW4SkZP4sz9MbE56r2qJtb2I
TLSH
T1B095F815F5788B22D07BC0B9C5D26A9AFA333C465F308BCB0245AF283E276D59536727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5764	2026-08-06_6ef050e8646aea6bd3a91abb5d336664_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5764	2026-08-06_6ef050e8646aea6bd3a91abb5d336664_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-06_6ef050e8646aea6bd3a91abb5d336664_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-06_6ef050e8646aea6bd3a91abb5d336664_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5764