ebc8aaef7d8866bd2900cf4b70046ecaf23067a542f1b2c6bb98c5ef53a740a2

Analysis

max time kernel
148s
max time network
128s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 12:36

Target
2026-08-24_5c045f683feb4855c748c51ca6885e7a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 585KB
Sample260825-pterfasdlg
SHA256 ebc8aaef7d8866bd2900cf4b70046ecaf23067a542f1b2c6bb98c5ef53a740a2
MD5 5c045f683feb4855c748c51ca6885e7a
SHA1 352b99a94abb6fba28e29a2161f2fc2a4413e902
SHA512 2fe2793559156c00093a8414f25c1c88b3603dc387dd6fcd6ce714782b4d18ad44201c9ce5295d724e3a58b71d8b73927778c10e85f3c848e667ca6e0bfe6968
SSDEEP 12288:iD3JeU7vinrm5FW0pitqD3JeU7vinrmTf:iD5Tvinrm5FWCitqD5Tvinrmj
TLSH
T101D44A0676984FA5D12F8174C99245A6E7737C129F2187CF07A4BE2A3F327C0AE39257
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
352	2026-08-24_5c045f683feb4855c748c51ca6885e7a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
352	2026-08-24_5c045f683feb4855c748c51ca6885e7a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_5c045f683feb4855c748c51ca6885e7a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_5c045f683feb4855c748c51ca6885e7a_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:352