dcaa9647f33511523b87cd34ece98626228abc4f3ffb6f1881241465509cf580

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 04:06

Target
2026-08-21_a4b5e6273f06f7858efc025880b1d730_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.3MB
Sample260821-ephbnaseng
SHA256 dcaa9647f33511523b87cd34ece98626228abc4f3ffb6f1881241465509cf580
MD5 a4b5e6273f06f7858efc025880b1d730
SHA1 469154a8a6aa7dd3a708337280213ddd39cda883
SHA512 a6bfafe518b127782448d685c4f4c108724202c3faf04bca661353086c31723247234d142241097f72e88f661d664d4d715d1a1cf10cd8db79936e765482406c
SSDEEP 24576:iD5Tvinrm5OaEBYipmivqB+Ze0p4Ek4niOkl/A04szE87JKTvm:k56rReW4SkZP4sz9Mb
TLSH
T107550915F5788B23D0BBC0B9C5D66A99FA333C465F308BCB02459B283E276D5963533A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3452	2026-08-21_a4b5e6273f06f7858efc025880b1d730_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
3452	2026-08-21_a4b5e6273f06f7858efc025880b1d730_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-21_a4b5e6273f06f7858efc025880b1d730_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-21_a4b5e6273f06f7858efc025880b1d730_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3452