5c0278994c4de3b495d55f4adc6a24fc5932172211676ffb4511ae90fbf6c9ed

Analysis

max time kernel
148s
max time network
118s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 14:17

Target
2026-08-20_e36f11eab7a962a374185fe55ae787f6_amadey_cobalt-strike_hijackloader_satacom_stealc_vidar_wannacry.exe
Size 2.9MB
Sample260820-rl6ajadn8y
SHA256 5c0278994c4de3b495d55f4adc6a24fc5932172211676ffb4511ae90fbf6c9ed
MD5 e36f11eab7a962a374185fe55ae787f6
SHA1 89a47cdbdb6f9094fcd21e3ea8b7adcb004a463a
SHA512 c6cbea529addc0934740240f2170fde5ebbc12fd2fc6216e5f97710db26d275885e3a8459fa476206cc68384145c46874dba360ef983ccf240ea553b8be0a624
SSDEEP 49152:k56rdcN+Dzc9OBAXqwyOTdLPji0AjspYqKwqS:hrdxzpAawzjow6u
TLSH
T172D52755F2B40AA1D0BF9075CAA29646F9733C850F7086CB02D5FB7D2F33691996A323
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3856	2026-08-20_e36f11eab7a962a374185fe55ae787f6_amadey_cobalt-strike_hijackloader_satacom_stealc_vidar_wannacry.exe
3856	2026-08-20_e36f11eab7a962a374185fe55ae787f6_amadey_cobalt-strike_hijackloader_satacom_stealc_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-20_e36f11eab7a962a374185fe55ae787f6_amadey_cobalt-strike_hijackloader_satacom_stealc_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-20_e36f11eab7a962a374185fe55ae787f6_amadey_cobalt-strike_hijackloader_satacom_stealc_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3856