1e5da01221796f25a2fda0516333187495482efe73bae4bda37da26e97198acb

Analysis

max time kernel
150s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/08/2026, 19:19

Target
2026-08-17_525711b3a52f5bd226ef5e93d03d46ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.7MB
Sample260817-x1nlxsysdy
SHA256 1e5da01221796f25a2fda0516333187495482efe73bae4bda37da26e97198acb
MD5 525711b3a52f5bd226ef5e93d03d46ad
SHA1 c53a0ccf9784cdb0cc0311bff96bf3e52ff15cd9
SHA512 1a500af568d590d2f88ae040d46e9b49c0377d0144d0096ccb0a7e2af404b8690be3e14f79c845dcf8ddf506f841a14585e8b2cfb7c20da6612b770e9d9eff71
SSDEEP 24576:iD5TvinrmdCKaEBiXKapVETcZe0p4Ek4niOkl/A04szE87JKTvmx5jcAkSYqyE:k56r5eW4SkZP4sz9Mb8pYq
TLSH
T170850815F5788B22D0B7C0B9C5D2AA9AFA3338465F308BCB0245DB283E277D69535736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3740	2026-08-17_525711b3a52f5bd226ef5e93d03d46ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3740	2026-08-17_525711b3a52f5bd226ef5e93d03d46ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-17_525711b3a52f5bd226ef5e93d03d46ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-17_525711b3a52f5bd226ef5e93d03d46ad_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3740