9ef38ee6d8cc76eb2fef227fbdb3f810907b98fd1469a6746f458e3ee23909cc

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 03:32

Target
2026-08-24_b46666ccc361825404d4a07a9f24597b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 1.8MB
Sample260825-d3ra2sek2x
SHA256 9ef38ee6d8cc76eb2fef227fbdb3f810907b98fd1469a6746f458e3ee23909cc
MD5 b46666ccc361825404d4a07a9f24597b
SHA1 04da3c003a6999c313fe2c4f8f096cf33bd3c581
SHA512 be287ee0b28e613ca349950503ebdf88456ea213ba16ae7d02a988737ad284844dca32cde48d000bae64b13588d3c4b2452445e16d4f12a38cc7f75034d02d6e
SSDEEP 24576:iD5TvinrmF+pC5jcAkSYqyExZe0p4Ek4niOkl/A04szE87JKTvmLMD5TvinrmC:k56r8pYqLeW4SkZP4sz9Mbd56rX
TLSH
T16885F815F5788B22D07BC0B9C5D2AA9AFA333C455F308BCB0245AF683E276D58935727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1804	2026-08-24_b46666ccc361825404d4a07a9f24597b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1804	2026-08-24_b46666ccc361825404d4a07a9f24597b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_b46666ccc361825404d4a07a9f24597b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_b46666ccc361825404d4a07a9f24597b_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1804