ae38929ce8280e1d1e6b0bc12d26d787d79577e694c00402afa14b875247651c

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 21:07

Target
2026-08-19_086bdb412f4dc3184cc7b70ceaedc64a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 505KB
Sample260819-zycsrahf64
SHA256 ae38929ce8280e1d1e6b0bc12d26d787d79577e694c00402afa14b875247651c
MD5 086bdb412f4dc3184cc7b70ceaedc64a
SHA1 facab788b7b474128112914c39c44ea1228c9606
SHA512 ba0888acd27e2c6c5469fc4482de19c88d38b10880f650385ec3911481f887fab1998d290e05b3e90b95981fccc16098d74eb6017452fe2aa2846f131cae506d
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNFl8fnMa7jEpxCDmt4JZg2p7LrimEHcGuvvNFC:iD3JeU7vinrmCvMaofCD3JeU7vinrmC
TLSH
T1BBB43A1672988FA9D16F9174D99245A6E7733C129F2187CF0350BE3A3F366C0AE39253
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1564	2026-08-19_086bdb412f4dc3184cc7b70ceaedc64a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1564	2026-08-19_086bdb412f4dc3184cc7b70ceaedc64a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_086bdb412f4dc3184cc7b70ceaedc64a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_086bdb412f4dc3184cc7b70ceaedc64a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1564