78b4318fd3846dd301df1ab4c8fc45f5479727b489bd43cb582d757aaa454544

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 16:07

Target
2026-08-19_0aec86c30b2b88f13de6adb161cca295_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.3MB
Sample260819-tk427azxht
SHA256 78b4318fd3846dd301df1ab4c8fc45f5479727b489bd43cb582d757aaa454544
MD5 0aec86c30b2b88f13de6adb161cca295
SHA1 d95389ed8801ceff5d8fcb9a3e3b9e68c93b3c2d
SHA512 1168ced67d7eee6d5873595a327aee084a5e4efebd3da860dc25e827a9dcb71e46c61106e54eb4b2e876f184abdccd3408d3978b2691063d7fd07a9c5acbe7bc
SSDEEP 24576:iD5Tvinrm5OaEBYLkiNkaoAbFZe0p4Ek4niOkl/A04szE87JKTvm:k56rKeW4SkZP4sz9Mb
TLSH
T16B550916F5788B23D0BBC0B9C5D66A99F9333C465F308BCB02459B283E276D5963533A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4380	2026-08-19_0aec86c30b2b88f13de6adb161cca295_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4380	2026-08-19_0aec86c30b2b88f13de6adb161cca295_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_0aec86c30b2b88f13de6adb161cca295_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_0aec86c30b2b88f13de6adb161cca295_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4380