660756709c6687d095221180a94e0e46442ea3648f3d24716f20c175af7e2c0f

Analysis

max time kernel
148s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 10:45

Target
2026-08-24_6fa16651071a7dee902158d7465cbc36_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 3.7MB
Sample260825-mtfbvsxsew
SHA256 660756709c6687d095221180a94e0e46442ea3648f3d24716f20c175af7e2c0f
MD5 6fa16651071a7dee902158d7465cbc36
SHA1 8280d8ca01a39459711534700ba69557ab03907c
SHA512 ba189bbacfd94dd3ee4d0210762000cb144217b36dbba587eb81f3a810fa375dee05d83b10ff7ec73f047a1db584666447d43299f21cf39143eb2d34787e67b4
SSDEEP 49152:k56r+qJtb2IdqJtb2IEeW4SkZP4sz9Mbd56rLVO88hXl+dPji0Aj:hr+cFfkZcerI/h1+djo
TLSH
T1C606C615F5788722D07BD0B9C6D2A69AFA3338415F708ACB0285DB7C3E276D68536723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1680	2026-08-24_6fa16651071a7dee902158d7465cbc36_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
1680	2026-08-24_6fa16651071a7dee902158d7465cbc36_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_6fa16651071a7dee902158d7465cbc36_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_6fa16651071a7dee902158d7465cbc36_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1680