9eb34605edd1f7b4b908ddc249736644c10897fcd9ba0888109dba5b573aa95f

Analysis

max time kernel
148s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 19:06

Target
2026-08-19_6ec5ad91513de69062d077d6cb0a6b62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.2MB
Sample260819-xsghmsgm4y
SHA256 9eb34605edd1f7b4b908ddc249736644c10897fcd9ba0888109dba5b573aa95f
MD5 6ec5ad91513de69062d077d6cb0a6b62
SHA1 b0b8281431b532b41dca729e6fa3feff32a75fb5
SHA512 d7f1a2adf666937d54d447f3b60f1cdc119687cae01ba7b44fa7fd9ec68a0fa50c0c2f76da86aad1cbaad9cea7b695fb132eb151441c09d14075223d9439c349
SSDEEP 24576:iD5Tvinrm5FQI0Le5ji0hmxNrMDsXN4Jk+p5JD5Tvinrmh5jcAkSYqyE:k56rwPji0AjKJDp5B56rapYq
TLSH
T1C3B52912B6644FB5C06BC078C5A35686EA733C454F309BCB0299AF393E27AD25E35763
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3664	2026-08-19_6ec5ad91513de69062d077d6cb0a6b62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3664	2026-08-19_6ec5ad91513de69062d077d6cb0a6b62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_6ec5ad91513de69062d077d6cb0a6b62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_6ec5ad91513de69062d077d6cb0a6b62_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3664