c1539fb12347a6032a955b8f16b98629a85d0a4e1dbbc6ea6032704fa8d3d262

Analysis

max time kernel
148s
max time network
149s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 16:53

Target
2026-08-24_27d4a93dd41b3c4702d1343fa58220da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 3.4MB
Sample260825-veclesweja
SHA256 c1539fb12347a6032a955b8f16b98629a85d0a4e1dbbc6ea6032704fa8d3d262
MD5 27d4a93dd41b3c4702d1343fa58220da
SHA1 38dffe9ba3e5a138443544c9365dfb9cc3035b4f
SHA512 0f006709472b89e830a9accfadee52cbde6d01ce50c5dc99bb3aa9bc7bba83b318a5ee33a70f9e8ac34b0b5639da7afb8d462763c9cf2a2cb9a74c901e1c9a68
SSDEEP 49152:k56r5qJtb2Ij56rbeW4SkZP4sz9Mbc56r+qJtb2IU56ru56rc:hr5Jr7fkZc5r+Grbrc
TLSH
T1F7F5B315E1688B62D06F9079C6925699FA333C414FA08BCB0285FE3C3F376D599B6723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5276	2026-08-24_27d4a93dd41b3c4702d1343fa58220da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5276	2026-08-24_27d4a93dd41b3c4702d1343fa58220da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-24_27d4a93dd41b3c4702d1343fa58220da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-24_27d4a93dd41b3c4702d1343fa58220da_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5276