07199a3b496aa25a7b991cae361d70645091dd9294a00f57e6231e07a1935df5

Analysis

max time kernel
148s
max time network
124s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/08/2026, 21:09

Target
2026-08-19_06962dcdc21b774366896334928a4456_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 2.5MB
Sample260819-zzwbgstdpb
SHA256 07199a3b496aa25a7b991cae361d70645091dd9294a00f57e6231e07a1935df5
MD5 06962dcdc21b774366896334928a4456
SHA1 53445cacac9a1b5cb957550b9d9d5d270a9088f3
SHA512 02490604e30f41b980907d6069f9b852d501a0b11aa0f7f662c4bc77eea0ce433a008a036e1f4d947fee16e281b9c52c80d6e9b5e2587d3be56e1bc637c6114f
SSDEEP 24576:iD5TvinrmAYTqMi8CtBd2QHCHmTBW5sTYTqMi8CtBd2QHCHmTBW5bYTqMi8CtBdB:k56r+qJtb2I8qJtb2IdqJtb2It56rS
TLSH
T197C5B315E1688B61D06FC079C7929699FA333C414FA08BCB02C5EA7C2F376D599B6723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4700	2026-08-19_06962dcdc21b774366896334928a4456_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4700	2026-08-19_06962dcdc21b774366896334928a4456_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-19_06962dcdc21b774366896334928a4456_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-19_06962dcdc21b774366896334928a4456_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4700