f8afd074d94e7b8e792f9707d5c4240036f7e765222d78f8204b286bc124c6e3

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 22:26

Target
2026-09-19_a29eef97fa1610240810ed16c75cb7b6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
Size 440KB
Sample260919-2cvsjsxemb
SHA256 f8afd074d94e7b8e792f9707d5c4240036f7e765222d78f8204b286bc124c6e3
MD5 a29eef97fa1610240810ed16c75cb7b6
SHA1 6be87cb0d4878f4f129639f4efb3ec8f43eaf965
SHA512 17873b4918b0a92b9e7cf10108167f5748a103a5ca8ef23815097996f741622024898466e06c9c8aec5afa2a9848bc116f88ee7c0f2f05b44813d33be66ccd72
SSDEEP 6144:iDmt4JZg2p7LrimEHcGuvvNF5Oa7/VC964cx1Ezc9diAi6Ehc:iD3JeU7vinrm5OaEBYiw9UN7hc
TLSH
T1F5A47C16A6984FA5E61F8170E4E10596EB737D029F5083CF1364BE253F327C0AE792A7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5564	2026-09-19_a29eef97fa1610240810ed16c75cb7b6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
5564	2026-09-19_a29eef97fa1610240810ed16c75cb7b6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-19_a29eef97fa1610240810ed16c75cb7b6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-19_a29eef97fa1610240810ed16c75cb7b6_amadey_cobalt-strike_hijackloader_satacom_vidar_wannacry.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5564