84e9b77ba79e628743efa831bda53ab848d386e5506b26b97d41da8b4aaba307

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 00:21

Target
2026-08-24_d1d0ea024e749ee5c679cacfc4767bc4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.2MB
Sample260825-anef6adn4v
SHA256 84e9b77ba79e628743efa831bda53ab848d386e5506b26b97d41da8b4aaba307
MD5 d1d0ea024e749ee5c679cacfc4767bc4
SHA1 9fb8e5cf9c079dca728abe34c021dbd93c1be04c
SHA512 882290393e69318b075df5a340ad01dd9bbc2005a674b0bf6bebc54938b5b0d4653e226e5aed0a63a0fa352ea71e2c304ca5e66b543b8421c553507877d825bc
SSDEEP 24576:iD5TvinrmLw9MD5TvinrmAYTqMi8CtBd2QHCHmTBW5kD5TvinrmC:k56rg56r+qJtb2Ij56rX
TLSH
T11D451915B2688F65D07FD078C5D2569AEA333C425F308BCB0285BE693E376D1993A723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4088	2026-08-24_d1d0ea024e749ee5c679cacfc4767bc4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
4088	2026-08-24_d1d0ea024e749ee5c679cacfc4767bc4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_d1d0ea024e749ee5c679cacfc4767bc4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_d1d0ea024e749ee5c679cacfc4767bc4_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4088