db2b65262b67e2db32aa2bfcbc90c7b34d0adcbe04efff3e7949606def7e376f

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 11:19

Target
2026-08-20_d430bf5119f1279186f73ee1c190a36c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 859KB
Sample260820-ne3dhsbj5v
SHA256 db2b65262b67e2db32aa2bfcbc90c7b34d0adcbe04efff3e7949606def7e376f
MD5 d430bf5119f1279186f73ee1c190a36c
SHA1 a24c04e08e09d139360503bce1f61d140ef42629
SHA512 7c0bbf80edbd08bbcc05f377f50ae715ad12ff71c7c57659e415c6d2bebc27cd7aac3ae01e1e3bffe4aa25b19bd75474e44d749dce411a0f3588e04884fca5c2
SSDEEP 12288:iD3JeU7vinrmdoTpYags6GE1gL5pRTcAkS/3hzN8qE43fm78V:iD5TvinrmdoTpYags6Gh5jcAkSYqyE
TLSH
T1EB152715F6648F61D07BC0B9C5D2969AEA733C465F3087CB1385AE283F236D29939363
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1504	2026-08-20_d430bf5119f1279186f73ee1c190a36c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1504	2026-08-20_d430bf5119f1279186f73ee1c190a36c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_d430bf5119f1279186f73ee1c190a36c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_d430bf5119f1279186f73ee1c190a36c_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1504