4cc36253d50349b09fb4fe03dca3d98592e68b2e8adc1e06b3603a5d4468a84a

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/08/2026, 11:18

Target
2026-08-19_83c2d584a4f2512c16c1e0b1df1293a8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 930KB
Sample260819-nejamssfqa
SHA256 4cc36253d50349b09fb4fe03dca3d98592e68b2e8adc1e06b3603a5d4468a84a
MD5 83c2d584a4f2512c16c1e0b1df1293a8
SHA1 ec8a3bb787d9898dcd8691505906adf30781c758
SHA512 7fb45ecdba379a257114a6e363c0aeebf14729fe9b7684e7fc72e7aaa490687103d250b81589dc0c90f5be27888e96f899f5462b347f95cf30e3e289694f76ff
SSDEEP 24576:iD5TvinrmdjQyry0iLasT2r5jcAkSYqyE:k56ripYq
TLSH
T17A152816E6648F65D03BC0B5C5D2569AEA733C465F3087CB1389AE283F237D1993A363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3424	2026-08-19_83c2d584a4f2512c16c1e0b1df1293a8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3424	2026-08-19_83c2d584a4f2512c16c1e0b1df1293a8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_83c2d584a4f2512c16c1e0b1df1293a8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_83c2d584a4f2512c16c1e0b1df1293a8_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3424