a8fe026fd42869a516e7d62fd675c7d18b06c860dd66b3b12cc46ce0a0464686

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 10:47

Target
2026-08-19_dd4c46ac9ec09046095d0cff7796b8c0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 322KB
Sample260819-mvszcascla
SHA256 a8fe026fd42869a516e7d62fd675c7d18b06c860dd66b3b12cc46ce0a0464686
MD5 dd4c46ac9ec09046095d0cff7796b8c0
SHA1 f7aa55e49730e7504cd5078c8f2fad17336054c2
SHA512 c04c9d8e284b358bbdb04ef8ad006c845f4d8f2559a0418913d080422de6c6e755d50f0a6d32708e84949b5769d7b0754430cc7a77c84278cfddf0e2b7aa0433
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFl8fnMa7jEqRe0MVC9:iD3JeU7vinrmCvMaot0D
TLSH
T1D1647C1666984FA5E22F8174D9E205A6E7737C029F1187CF1360BE293F327C0AE79257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4852	2026-08-19_dd4c46ac9ec09046095d0cff7796b8c0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4852	2026-08-19_dd4c46ac9ec09046095d0cff7796b8c0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_dd4c46ac9ec09046095d0cff7796b8c0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_dd4c46ac9ec09046095d0cff7796b8c0_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4852