f9936e7305a7e09ede10e8e06e9ba509b4722a4e4a1e8652d8ea14b909791edf

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 14:11

Target
2026-08-20_ee3ab9e4ae372bb310e14369ae740546_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.0MB
Sample260820-rhqqns11ew
SHA256 f9936e7305a7e09ede10e8e06e9ba509b4722a4e4a1e8652d8ea14b909791edf
MD5 ee3ab9e4ae372bb310e14369ae740546
SHA1 a1eb2c4fbe3ae0fbbf6d37613d755d2c94ba10b6
SHA512 da133addc84db81555b12bafb55d9b64461d45899fe7b865e8cad07a4bf63000e65c09a408e558bb3c0a0585a7c776e72642c0eded53ac93e8ad50681e1a1335
SSDEEP 24576:iD5Tvinrm4YTqMi8CtBd2QHCHmTBW5kD5Tvinrmb:k56r8qJtb2Ij56r
TLSH
T16B350915B2688F65D07FC079C5D2969AEA333C415F308BCB0285BE693E376D1993A723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4468	2026-08-20_ee3ab9e4ae372bb310e14369ae740546_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4468	2026-08-20_ee3ab9e4ae372bb310e14369ae740546_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_ee3ab9e4ae372bb310e14369ae740546_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_ee3ab9e4ae372bb310e14369ae740546_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4468