9b93e6e7c561844184f0b78599ee2f1ddbc1fe54d05c7cd1dda35d02df71f042

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 09:52

Target
2026-08-16_cbe6cd3983174dcf55ed8851e9e9cd0e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 997KB
Sample260816-lwebxavdma
SHA256 9b93e6e7c561844184f0b78599ee2f1ddbc1fe54d05c7cd1dda35d02df71f042
MD5 cbe6cd3983174dcf55ed8851e9e9cd0e
SHA1 c71c4e7f63cbf036a5d5f7790ffeccc1f7dac51a
SHA512 c691fa416396980180bf5a5ee4e1fc33abdffdd872e62ed8c4348dcf57c175364d125d831b2634fe6e293caf8ab60077fb49c1f30500db6e74e36de646700a0e
SSDEEP 24576:iD5TvinrmdoTpYagaulhZe0Le5ji0hmxNrM:k56rzPji0Aj
TLSH
T100251716F6A84F65D02BC0B5C5D2569AEA733C425F3087CB03559E283F277D29A3A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
616	2026-08-16_cbe6cd3983174dcf55ed8851e9e9cd0e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
616	2026-08-16_cbe6cd3983174dcf55ed8851e9e9cd0e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-16_cbe6cd3983174dcf55ed8851e9e9cd0e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-16_cbe6cd3983174dcf55ed8851e9e9cd0e_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:616