d59252153c1c56ae89905139086ebfbd7142cf0c35d371c2c03882d154332d96

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 17:16

Target
2026-08-19_db5e9ef71232a9619de2437f154fc39c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 880KB
Sample260819-vs799ayfqc
SHA256 d59252153c1c56ae89905139086ebfbd7142cf0c35d371c2c03882d154332d96
MD5 db5e9ef71232a9619de2437f154fc39c
SHA1 2ccf02bf7e8b36873e8189e714bfcd25bfba5600
SHA512 38b6d7fc19bd2e6d1d17d40c2d05cff62f29693f5fcd5c22bcda750314eda9b4253bbac6c6678ce8b241e0b5e98cdc006de3a7caffa4d491d17f80b4003fa1b1
SSDEEP 12288:iD3JeU7vinrm5FQDfiGXZNYVLeyUji0h90ZD0wxpGZIVuKrHs:iD5Tvinrm5FQDfiK0Le5ji0hmxNrM
TLSH
T1F4152916F5644F61D07FC0B9C5D2969AEA733C425F3087CB0255AE683E276D29A3A333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1352	2026-08-19_db5e9ef71232a9619de2437f154fc39c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1352	2026-08-19_db5e9ef71232a9619de2437f154fc39c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_db5e9ef71232a9619de2437f154fc39c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_db5e9ef71232a9619de2437f154fc39c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1352