0e17fc81ab178d3c0ab603ec7a78d0be0d88e6652b633182f6225a8de3844474

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/08/2026, 18:55

Target
2026-08-24_fe446d989d6ed0aa12a29a4939546864_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.9MB
Sample260824-xkswpsef89
SHA256 0e17fc81ab178d3c0ab603ec7a78d0be0d88e6652b633182f6225a8de3844474
MD5 fe446d989d6ed0aa12a29a4939546864
SHA1 62c513e838311435c2454187bf609c789c15eab8
SHA512 3a3cd83f1120399a6f49748458a4bcb0603fda81e562bbc60fc348762779e4d5a10bf2293df3faa553626c5cad25c5f4d49c72bc2266196e20baba9eecbda790
SSDEEP 24576:iD5TvinrmdCKaEgqbLynD5TvinrmGZe0p4Ek4niOkl/A04szE87JKTvm7w35jcAf:k56rj56rbeW4SkZP4sz9MbLpYq
TLSH
T167950815F5788B22D07BC0B9C5D2AA9AFA333C455F308BCB0245AF283E276D59935727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1188	2026-08-24_fe446d989d6ed0aa12a29a4939546864_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1188	2026-08-24_fe446d989d6ed0aa12a29a4939546864_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_fe446d989d6ed0aa12a29a4939546864_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_fe446d989d6ed0aa12a29a4939546864_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1188